Major Description
the attached test shows a scenario where the permission validator will throw accessdeniedexception when testing for NO_PERMISSION.
there is a trivial, no-risk fix for this which is also better performance wise (as it simply omits the evaluation -> attached) although IMO this should also be fixed in the permission evaluation in the long run.