[BISERVER-10768] Fix 4.8 bug that filters roles out of permitted list if user is not a member of the role.