Context:

In AuthorizedCollectionService.resolveToAuthorizedCollection, we retrieve both user and group roles and then determine the highest available authorization. User roles take precedence over group roles however, so we really only require group roles if we cannot find a user role. 

AT:

• resolveToAuthorizedCollection only retrieves group roles if no user roles were found

Testing Notes:

• ensure group permissions still work as expected