fixed  #1980: Record Level Security: permissions don't follow role's inheritance