checks if user can perform action \param action:string action (dbus-style
resource string) which user wants do \param user:string id of user \return
symbol
:yes if user has permission
:auth if authorization required
:no if permision denied
raises exception on error