roleAssignments method now can check isEffectivelyPermissionRoot on all dvObjects