Having multiple RoleNeed objects in a Permission does not require
all to be satisfied in order to .can(), but will return True if
any are present. This makes the previous roles_required logic more
elegant for roles_accepted. roles_required decorator needs to check
all permissions individually and return only if all permissions exist