Increased complexity on child-parent relationship tests
AbstractGuard doesn't use rbac's permissions any more but rather checks
for the roles itself. This fixes #106