user: implement User.has_any_permission() to replace the old semantics of User.is_admin (ref #8)