revert argument list for hasPermissions to directly
take an array and the creator id instead of just the object