User should have access to its own access info. Right now a user can't query its groups or its permissions.