implementation for has_permission

https://github.com/plone/plone.api/issues/172
And maybe test for some manage permission and assert == False