Fix permission comparison

It is ok if the actual set of permission is different from the expected one, if all permissions are expected

Should fix #2828 (closed) and #2525 (closed)