LPS-38031 Minimal fix 1/2: Solve by hardcoding for the 5 portlets that have root resources with VIEW permission and thus are affected by this issue
LPS-38031 Minimal fix 2/2: Setting the permission on the root resource has to be done at the very end to ensure it is applied. Otherwise the value in the request may win.

This has been a separate commit to make it obvious that this change is necessary
LPS-38031 Implement mechanism to specify which is the root model resource of a portlet
LPS-38031 Set root to true in all root resources
LPS-38031 Use new methods to find the root resource of a portlet instead of hardcoding it
LPS-38031 Typo
LPS-38031 Keep it closer to where it's used (not as efficient, but easier to read). In this caes, perf is not an issue since this is only used on reading of plugins and will result in 0 ms difference.
LPS-38031 The code was making the previous comments incorrect. Move it around and add a new comment block so that the previous comments are still true.