minor edit: rename method has_all_permissions? to all_permissions?