if (user && user.role && user.Role.Permissions) {
              user.Role.Permissions.every(function(perm) {
                if (perm.action === permission) {
                  hasPerm = true;
                  return false;