public virtual bool HasPermission(string permission) { return this.Permissions != null && this.Permissions.Contains(permission); }