Added hasPermission to check if user has permission regardless of superuser status

So that you can check if a user actually has a permission, not have access which can be overwritten by the superuser permission.