> What if the drupal role the user has does not have the permission but they are given the permission via OG?

``vsite_get_os_permissions()`` makes sure to fetch only those specific permissions that should be "synced".