Improve permission rule check

Permissions without condition should be considered
for allow as well as deny check.

This allows easy refinement of permission rules.

Fixes RM-2803