LPS-50128 always use the rootPortletId as name when checking portlet permissions
LPS-50128 don't assume primKey contains a LAYOUT_SEPARATOR, it may match name, if so conver to new name
LPS-50128 indent only