added support for user.get_all_permissions(obj)

you're right.. fixed it.