cubicweb-container #3579851 [security] fix the permission weaver when facing fancy rdefs [resolved]

Especially with subcontainers (but not necessarily linked to), rdefs of the same rtype that belong to a container, a subcontainer, or something else are greedily processed.

The weaver must be made a bit smarter.

prioritynormal
typeenhancement
done in2.3.0
load1.000
load left0.000
closed by#255ebed5832f [secutils] make the permissions weaver more robust against relations shared by containers, subcontainers or from the outer world
patch[secutils] refactor a bit rdefs_roles... to make it less indented [applied][secutils] make the permissions weaver more robust against relations shared by containers, subcontainers or from the outer world [applied]