[repo security] deal with rewriten constant nodes in check_read_access, necessary when repo is used as an external source

sync_schema_props_perms('read_permission', syncperms=False) # fix read_permission cardinality