Upstream permission inheritance

[ivanslabbert]

Expand permissions of upstream groups with permissions applied to lower level groups

TODO:

• [x] Add API test for downwards inheritance of self-assigned permissions
• [x] Add API test for multi-path inheritance for the same docType with different permissions (the highest permission should apply)
• [x] Circular permissions breaks the API

Task to add CMS tests: #282