Missing permission testing inside node's methods

Node.getNode(relPath) does not check permissions for child nodes. As result the node with access restrictions still available using parent's node methods.