KRACOEUS-8534: added logic to check for permissions on child before addi...

...ng to hierarchy in parent
Agreed.  We should avoid checking roles in KC since permissions can be added and removed to roles.  Permissions decide what a user can do and roles are simply a way to group users and match those users to permissions.