Fix dept members able to edit coworkers.

It was looking at department `Department#members` but should have been looking at `Department#permissions`.