Ensured permissions are processed sequentially
Re #67 Exposed group identities to all traversal callbacks. Added unit tests.