moymir.api.users.hasAppPermission