[#1152] Call check_access in member_roles_list

I found this in ```/group/member_new```, warned by the Auth Actions Audit. If the user is unauthorized to add a new member to a group, he shouldn't even be able to get to that page in the first place, as doesn't matter who he tries to add, he won't be able to.

Anyway, this fixes a small part of the problem.