okfn/ckan — pull request #636 by tobes (2013-03-15 12:40:01+00:00)
Title: Access is not restricted when user is removed from Group

When access is checked for user with in group, only the active roles should be considered. But currently even if the user is removed from the group , he is still able to access the group using his old role.

new_authz.has_user_permission_for_some_org need to include filter for active record.