Bug 5239: Ensures that roles associated to a UserGroup are also part of

the meta permission check when changing the permissions of a
RoleDefinition.

java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/UserStoreImpl.java

@@ -819,6 +819,11 @@ public class UserStoreImpl implements UserStore {
                 logger.log(Level.SEVERE, e.getMessage(), e);
             }
         }
+        for (UserGroup userGroup : userGroups.values()) {
+            if (userGroup.getRoleDefinitionMap().containsKey(roleToCheck)) {
+                ownerships.add(new Ownership(null, userGroup));
+            }
+        }
         return new Pair<>(false, ownerships);
     }