Use issubset instead of intersection to check permission. Fixes #36