Auth::applyRestrictions(): Don't take redundancy_group into account

Otherwise, redundany_group objects are not visible.

- New filter : Either the host/service is null (the object is a redundancy group) or given restrictions match

Author: sukhwinder33445

Diff for: library/Icingadb/Common/Auth.php

@@ -168,8 +168,14 @@ public function applyRestrictions(Query $query)
                 }
 
                 if ($customVarRelationName === false || count($relations) > 1) {
-                    if (($restriction = $role->getRestrictions('icingadb/filter/objects'))) {
-                        $roleFilter->add($this->parseRestriction($restriction, 'icingadb/filter/objects'));
+                    if ($restriction = $role->getRestrictions('icingadb/filter/objects')) {
+                        $roleFilter->add(Filter::any(
+                            Filter::all(
+                                Filter::unlike('host.id', '*'),
+                                Filter::unlike('service.id', '*')
+                            ),
+                            $this->parseRestriction($restriction, 'icingadb/filter/objects')
+                        ));
                     }
 
                     if ($applyHostRestriction && ($restriction = $role->getRestrictions('icingadb/filter/hosts'))) {
@@ -178,7 +184,7 @@ public function applyRestrictions(Query $query)
                             $this->forceQueryOptimization($hostFilter, 'hostgroup.name');
                         }
 
-                        $roleFilter->add($hostFilter);
+                        $roleFilter->add(Filter::any(Filter::unlike('host.id', '*'), $hostFilter));
                     }
 
                     if (