security: fix _fill_role_cache_batch when role is global

global means role assignment is not on an object