[MONDRIAN-1766]  Role restrictions are not honored in some cases if the number of MemberGrants exceeds the maxconstraints property value

This change introduces a final pass filter of the tuple list generated by NativeSet to assure that all items in the list are accessible.  Since this could be costly,
it short-circuits the checks except where one or more hierarchies actually have a role restriction defined.
(cherry picked from commit ca9b1f3)

The merge brought NativeSetEvaluationTest from master.  Most tests are currently disabled, pending MONDRIAN-1461 and MONDRIAN-1420,