Explicit transaction block with multiple saves will have only the first one permission-checked

[rcabralc]

The following should be investigated and turned into a test case:

MyModel.transaction do
  instance.save!
  other_instance.save! # -> will not be checked
end