Symbol: can_do_masked_user_access