Convert user_access() in NodeTypeAccessController and provide unit tests