diff --git a/src/Cartalyst/Sentry/Users/Eloquent/User.php b/src/Cartalyst/Sentry/Users/Eloquent/User.php
index <HASH>..<HASH> 100644
--- a/src/Cartalyst/Sentry/Users/Eloquent/User.php
+++ b/src/Cartalyst/Sentry/Users/Eloquent/User.php
@@ -599,7 +599,8 @@ class User extends Model implements UserInterface {
 					// we match that permissions explicitly exist.
 					elseif ($permission == $mergedPermission and $mergedPermissions[$permission] == 1)
 					{
-						$matches = true;
+						$matched = true;
+						break;
 					}
 				}
 			}
Fix bug in previous checkin (typo and logic)