Fix permission checks for root user with pyramid 2.x

tailbone/auth.py

@@ -209,6 +209,10 @@ class TailboneSecurityPolicy:
         return self.session_helper.forget(request, **kw)
 
     def permits(self, request, context, permission):
+        # nb. root user can do anything
+        if request.is_root:
+            return True
+
         config = request.registry.settings.get('rattail_config')
         app = config.get_app()
         auth = app.get_auth_handler()