When creating a role, we do not check if the exceptions for
the field permissions is a subset of granted fields. If such
role is assigned to a user the user authentication fails.
On the same lines we validate role query, this commit
adds check if the exceptions for the field
permissions is a subset of granted fields when parsing the
index privileges.