add hasPermission-operation to IOrganizationalUnit