TEIID-2832 correcting the denial logic when multiple roles are in use