Teasing out general grant_permission_for! method