title: Apache Shiro Permissions: How to implement any of permission check
body: <p>I have a list of the following permissions:</p>
  <pre><code>book:download:red,
  book:download:blue,
  book:download:green
  </code></pre>
  <p>Now, I want to check whether the subject has any of those permissions set. If at least one of them is present, - permit.</p>
  <p>So, on my REST controller, I am slapping this annotation with value:</p>
  <p><code>@RequiresPermissions(value = book:download:*)</code></p>
  <p>It means in my case, the subject has at minimum one valid book it can download, - let him in!</p>
  <p>But, to my surprise, I get 403 with:</p>
  <pre><code>Subject does not have permission [book:download:*]
  </code></pre>
  <p>I would expect Shiro to use this wildcard and compare it against submitted permission like a REGEX check. And a result would have been - access allowed.</p>
  <p>Please correct me if my understanding is wrong. And is there is a way to achieve what I am asking here?</p>