We used to build access_ids from all user participations
rather than only the ones granting access.

This lead to pages showing up in page lists that the user
did not have access to anymore.

Only take into account user_participations with access level set
for the access ids. The other user participation serve to
track page visits, watch the page or star it.