That could be done - then we would at least be sure that `hasPermission` would properly be called but we could also use `mixed $permission` on both `RoleInterface` and `Rbac` so it would be up to the developer to decide what he want's to check exactly. That way, even Criteria (doctrines criteria api) could be passed!