Remove some invalid todo's in (Parent)UserGroupLimitationType

These todo's assumed that legacy was providing access if any inherited
user group matched, when in fact it only allws positive match on *direct*
assigned user groups just like this 5.x code does. So todo's can be removed.