Route filter: routeNeedsRoleOrPermission

routeNeedsRoleOrPermission acts like $user->ability