// newControllerUserFromGroup returns a permission.UserAccess that serves
// as a stand-in for a user that has group access but no explicit user
// access.
func newControllerUserFromGroup(everyoneAccess permission.UserAccess,
userTag names.UserTag) permission.UserAccess {
everyoneAccess.UserTag = userTag
everyoneAccess.UserID = strings.ToLower(userTag.Canonical())
everyoneAccess.UserName = userTag.Canonical()
return everyoneAccess
}
