Actual rights are improperly resolved in case of deny/allow collision

The following situation is badly handled:

• Allow view right on Space for surli
• Allow view right on Subspace for Foo
• Deny view right on Page for Foo

Obtained result:

• Deny view right for Foo and Allow view right for surli

Expected result:

• both the Deny and allow view right of Foo should be returned and only those
  It might seem contradictory, but it's actually needed to return the allow view since it means it will block the view right for surli in such case.