protected function lock()
    {
        if ( $this->subject == 'user' ) {
           return $this->manager->caller( $this->user );
        } elseif ( $this->subject == 'role' ) {
           return $this->manager->role( $this->role );
        } else {
            throw new \Exception("Caller not allowed: $this->subject");
        }
    }