CRM-14109 move assumption that no clauses exist until after the ACL clause so that ACL users do not have is_active=1 added when trying to view disabled
CRM-14109 remove extra, unreliable, permission check