Allowing assert_authorized to take an array of permissions