The only approach would involve querying all of the relevant permissions manually. If you can approach what you're trying to do differently, that would probably be the ideal approach; permissions should generally be "positive" (so yes/bigger is more permissive), though I appreciate that's difficult in some scenarios.