0013302: fix node acl for roles with groups