#1 if user has same permission it will check several times

`$user->roles->pluck('permissions')->flatten()->merge($user->permissions)` role permissions may duplicate user permissions