Consider refactoring custom-related code in `User` class

We should consider to extract read_code_for, read_vulnerability_for and similar methods to another class