Permission-fix

When being in both admin-group and user-group, the deny-permissions of
the user-group overruled the admin (because by coincidence the
user-permissions were read first).

* Fix: now only the deepest groups are being checked (for every group,
the parent-groups will automatically being checked if no permission was
found).