It returns the user who has the permissions (if you looked the implementation). I suppose ```User.current=setup_user_with_permission ...``` would ve made it clearer?