Admin UI does not show naming privileges properly if the same privilege is assigned by more than one path

Whilst looking at another issue - inability to remove naming privileges from unresolvable subject - I found that the UI does not show an immediate privilege when an indirect one is also present. Not sure how long this has been the case but quite likely some time. Privileges are returned as Set<NamingPrivilege> and so 'equivalent' privileges overwrite each other - may be random according to query order.

The underlying MembershipDao.findAllByStemOwnerAndMemberAndField correctly retrieves memberships so a solution that calls this can work