When finding epics, first check if user is member of top-level
group, if so there is no need to check al subgroups - we just
assume the user inherits permissions.