added methods: which_permissions(), which_permissions_any(), which_permissions_all()