[BUGFIX] Make RecordAccessVoter more strict

This change adds a separate check that if no frontend.user
aspect is set, then the method "groupAccessGranted"
should default to false.

Resolves: #97014
Related: #96996
Releases: main
Change-Id: Ifb2ab4586c49aee1ec7a1a058d4e1efcb358a061
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/73686


Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Bartsch <bo@cedev.de>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>