added support for user.get_all_permissions(obj)