Public Shared Function DoesUserHaveAllPermissions(ByVal userId As String, ByVal permissionIds As Collection(Of String)) As Boolean
Dim result As Boolean = False

Dim userPermissions As New Collection(Of RolePermission)
userPermissions = RolePermission.FindByUserId(userId)
If userPermissions IsNot Nothing Then

Dim permissionFoundCount As Integer = 0

For i As Integer = 0 To permissionIds.Count - 1
Dim permissionFound As Boolean = False
' Check each permission
For j As Integer = 0 To userPermissions.Count - 1
If userPermissions(j).Bvin = permissionIds(i) Then
permissionFound = True
permissionFoundCount += 1
Exit For
End If
Next

If permissionFound = False Then
result = False
Exit For
Else
' Check license when checking admin permissions
If permissionIds(i) = Membership.SystemPermissions.LoginToAdmin Then
SessionManager.CheckLicense()
' 5.7: Added PCI check to ensure default username is
' not allowed out of the box
SessionManager.CheckDefaultAdminUserForPCI()

Dim u As UserAccount = UserAccount.FindByBvin(userId)
If (u IsNot Nothing) Then
If u.IsPasswordExpired() Then
If (HttpContext.Current.Request.RawUrl.Contains("PasswordExpired.aspx")) Then
Exit For
End If
If (HttpContext.Current.Request.RawUrl.Contains("GettingStartedEmail.aspx")) Then
Exit For
End If
HttpContext.Current.Response.Redirect("~/bvadmin/PasswordExpired.aspx")
End If
End If
Exit For
End If
End If
Next

If permissionFoundCount = permissionIds.Count Then
result = True
End If
End If


Return result
End Function