another thought: should I just put a staff attribute on the user itself?