however "tenanteduser" is more correct, because you are checking not for the user as a whole, but a specific version of the user