Major Description
the current implementation of PermissionUtil.getReadOnlyTree may have a null tree passed and will in this case return null, which is not suited for those parts of the permission evaluation where the Tree cannot be null and a non-null return-value is therefore expected.
stillalex, i would therefore suggest to rename the existing method to getReadOnlyTreeOrNull and add a variant that never returns null. see attached patch.