Move User::getAllRights to PermissionManager.