consolidate logic duplication in ACL_Trait_User _check_permission() method