implementation for has_permission

https://github.com/plone/plone.api/issues/172
Yep, they are incorrect.