Anyone with a role in a group could preapprove drafts. Changed that to an explicit subset of roles. Fixes ticket 998. - Legacy-Id: 7609 Note: SVN reference [7587] has been migrated to Git commit 5ba0a274933e61e242ebcbf72b2f37e27d1da60d