Fix Permission.is_allowed to correctly check permissions
Merge pull request #242 from reciprocity/feature/two-fixes

The branch lies, it's only one fix.