It was discovered that when multiple group access permissions were defined, the "hasPermission" method was honoring the first group access permission only. This caused the value of group permissions in a portlet to return false. If an administrator had access permissions set to a single group access permission, "hasPermission" functioned as expected. The fix changes the "hasPermission" method to accept a list of Memberships. For example, if the admin has access permissions set as ":/platform/administrators/admin group1;:/platform/administrators/admin group2;*:/platform/administrators/admin group3", all three access permissions are now accepted.