Advanced permission control

[hzlmn]

Would be nice to add support of advanced permission checking to check_permissions decorator. Need to think about better way to do it. In general we need to support scopes queries like

Or(And('read', 'write'), 'admin') 

[gbarbaten]

Don't you think that this is in the scope of aiohttp-security?

[hzlmn]

Aiohttp-security will drop decorators soon. Plus they have strong opinion about such combined permissions. And my usecase is lean microservice so i do not want another library for basic permission control.