sakaiproject/nakamura — pull request #774 by mrvisser (2012-04-29 13:30:28+00:00)
Title: KERN-2818 When user is switched from viewer role to editor, their new pe...

...rmission scheme will never have 'read' permission.

* Re-ordered permission modifications to ensure grants are performed after the denies
* Refactored the logic a bit to avoid unnecessary permission checks, to avoid potentially unnecessary permission modifications to be made, and to avoid the authorizableCountChanger to be invoked unnecessarily; Also, the resulting logic will hopefully have less "hidden requirements" when adding new roles, which is probably why this bug occurred in the first place.