fix #399 wrong combined perms for module perms

The group permissions on modules were wrongly checked.
No perms intersection was done but the check stopped at first group perms