public void setPermissionsLookupEnabled(boolean permissionsLookupEnabled) {
        this.permissionsLookupEnabled = permissionsLookupEnabled;
    }
Enables lookup of permissions during authorization.  The default is "false" - meaning that only roles
are associated with a user.  Set this to true in order to lookup roles <b>and</b> permissions.

@param permissionsLookupEnabled true if permissions should be looked up during authorization, or false if only
                                roles should be looked up.
core/src/main/java/org/apache/shiro/realm/jdbc/JdbcRealm.java