User permissions OR condition

The logic is well explained by patrick in this post