Only cancel forbidden right changes instead of all of them

RightsFilterListener currently check if there is any forbidden right change and cancel them all if it finds one.

We obviously cannot let a user set a right he/she does not have, but cancelling all changes could cause problems for some use case.