Previously, you only saw the group if your _direct_ membership in it was
what granted the right.  However, what we actually care about is if:
 (a) You are a member of the group, by any means.
AND
 (b) The group grants you the right; that is, if it is a member of any
     group which has that right granted to it.