This is the first step towards `UserAccess` being truly polymorphic. It
should accept any `HasRepository` instance.