Issue #3318190 by jungle: Use condition groups to merge the two queries in NodeAccessHelper::loadUserGrant() into one query
Closes #3357718