Could you rename this method to 'has_permission'. So it is the same like in the views and also more explicit.