Revert r36273:

Revert r36273:
The change was described only as "Fix confused code", but it changed from something
that appears to make sense (check for a permission key for that restriction group)
to something that doesn't (hardcoded check for two particular names).

If the change has an effect, and there's a reason for it, please describe it
in a bit more detail.