The current _has_privileges API requires a list of actions/privileges to check at a specific set of resources. This makes it difficult to determine if the user has any privileges for a specific application, as the consumer is required to provide a list of all potential resources.

When discussing with @tvernum, he mentioned the potential of expanding the _has_privileges API to support this or creating a new API to get a user's privileges for a specific application.