fixes #4597 - map host disassociate actions to permission
refs #2189 - update host group parameter search tests
fixes #1804 - find hosts through nested hostgroups on puppet class search