you can do it by just checking both perms