Fix dept members able to edit coworkers.

It was looking at department `Department#members` but should have been looking at `Department#permissions`.
I'm afraid we will not understand what this is supposed to do based on the method name. How about `member_of_permitted_departments?`