Assert that the user has the permission?