Node API is used to find groups/roles

[rymsha]

proncipal.js

        // users and groups have their keys as _id, but roles have them stored as key
        var principals = noKeys ? [] : common.queryAll({
            query:
                common.createQueryByField('_id', keys) +
                ' OR ' +
                common.createQueryByField('key', keys)
        }).hits;

This is incorrect. It is a wrong assumption that principal-key is a node _id
It is also wrong that roles have key field.

This method also dangerously returns undefined when nothing is found leading to various problems.

findPrincipals method should be used instead