generally speaking, if you need "all" the permissions a user has, you can do a lookup on the "base" one