Make user's own groups readable in the defaultread domain (with patch)

A CMS user cannot access /hippo:configuration/hippo:groups nor the groups to which he belongs below that.

This is easily visible in the repository servlet when logged in as the default user "author"

It results in the method org.onehippo.repository.security.User#getMemberships() returning no groups at all.

It can be fixed easily by adding two domain rules to the domain "defaultread": one for hipposys:groupfolder and one for hipposys:group with members=current user (expander _user_ ).

NB using a rule for hipposys:group with name = current-user-group (expander _group_ ) doesn't seem to work to fill User#getMemberships() using query //element(*, hipposys:group)[(@hipposys:members = '*' or @hipposys:members = 'CURRENT_USER')].

See attached files