--- a/schema.py	Wed Jan 13 16:07:54 2010 +0100
+++ b/schema.py	Wed Jan 13 17:40:53 2010 +0100
@@ -449,6 +449,7 @@
             for rdef in self.rdefs.itervalues():
                 if not rdef.has_perm(session, action, **kwargs):
                     return False
+        return True
 
     @deprecated('use .rdef(subjtype, objtype).role_cardinality(role)')
     def cardinality(self, subjtype, objtype, target):