RBAC system roles fixups

1. Unify generation of context query filters and apply to search and filter queries
2. Prevent repeated loading of permissions
3. Fix test to explicitly add join object in a specific context