DIB-961 - added new unit test to cover the condition where a subject match one permission could have multiple values, but only one of those values needs to imply the permission on a metacard. Fixed the match one specific permission to handle this use case.