[MONDRIAN-1766]  Role restrictions are not honored in some cases if the number of MemberGrants exceeds the maxconstraints property value

This change introduces a final pass filter of the tuple list generated by NativeSet to assure that all items in the list are accessible.  Since this could be costly,
it short-circuits the checks except where one or more hierarchies actually have a role restriction defined.
(cherry picked from commit ca9b1f3)

The merge brought NativeSetEvaluationTest from master.  Most tests are currently disabled, pending MONDRIAN-1461 and MONDRIAN-1420,
[MONDRIAN-1694]  Mondrian applies non empty to native filter when "matches" is used.

This change adds a check for NonEmpty prior to applying a context constraint when evaluating a native filter.  A SqlContextConstraint forces a join to the fact table,
which will drop any tuples not associated with fact data.
(cherry picked from commit 9f5891c)
Merge pull request #173 from mkambol/1694

[MONDRIAN-1694][MONDRIAN-1766]  Merge of commits from master to lagunitas.