[#818] Fix listing all survey groups for full authorization to root folder

* Include root folder in list of parent paths when verifying authorization