Change rules for getting rights for groupManager on attributes

 - change rules on member-resource attributes: only rights on any assigned
   group to resource are needed, add comment with definition of this rule
 - change rules on resource-group attributes: add comment with
   definition of this rule
 - change rules on user-facility attributes: groupManager need rights on
   any group (under resources of facility) which is from the same vo
   like some of users member, add comment with definition of this rule
 - change rules on user attributes: only rights on any group which is in
   the same vo like some of users member, add comment with definition of
   this rule
 - change rules on member attributes: only rights on any group which is
   in the same vo like the member, add comment with definition of this
   rule
 - change rules on vo attributes: change rights from NEVER to only
   rights on any group in this vo, add comment with definition of this
 - do NOT change rules on group, resource, facility and host attributes