I agree that this isn't a bitesize bug, given the need for unit tests and the potential for subtle circ policy breakage if a revised permission.grp_ancestors() is wrong.
I agree that this isn't a bitesize bug, given the need for unit tests and the potential for subtle circ policy breakage if a revised permission. grp_ancestors( ) is wrong.