#493 user cannot grant permission it does not hold.

Resolves #493