Exercise user.has_perm even more