has_perm hotfix

This fixes a `has_perm` bug introduced by #402. Hopefully that's the last time I merge something without running tests first.