title: @auth.requires_permission not working
body: <p>I have an application where I am using web2py's access control system. I have various users in <strong>auth_user</strong> table. To be more specific I have <strong>admin1@mysite.com</strong> user whose id is 4. There is a group <strong>admin</strong> with group id 1 in <strong>auth_group</strong> table. In <strong>auth_membership</strong> table I have <strong>user_id</strong> 4 related to <strong>group_id</strong> 1. It means that <strong>admin1@mysite.com</strong> is a member of <strong>admin</strong> group. Finally in <strong>auth_permission</strong> table I have a record which relates <strong>group_id</strong> 1 with permission named <strong>search</strong>. It means that <strong>admin</strong> group has <strong>search</strong> permission. I have a controller in which I have index method with decorator as <strong>@auth.requires_permission('search')</strong>. I am logging in with <strong>admin1@mysite.com</strong> and getting to this controller method. But this condition evaluates to false and control doesn't go inside method. However if I replace this decorator with one <strong>@auth.requires_login()</strong> it works. But I want only users with search permission to get access to this method. Please help me to achieve this.</p>