Fix user permission grant issue

app/models/auth/User.model.js

@@ -83,6 +83,12 @@ class User extends AuthUser {
         const PublicUserPermission = this.models.get('auth:PublicUserPermission')
         return await PublicUserPermission.can(permission)
     }
+
+    allow(permission, force = false){
+        // Need to check super.can, since this.can is async.
+        // This will exclude public user permissions, which is the behavior we want anyway.
+        if ( !super.can(permission) || (force && !this.permissions.includes(permission)) ) this.permissions.push(permission)
+    }
 }