code: public Set<Integer> selectGroupIdsWithPermissionOnProjectBut(DbSession session, long projectId, String permission) {
      return mapper(session).selectGroupIdsWithPermissionOnProjectBut(projectId, permission);
    }
docs: Lists id of groups with at least one permission on the specified root component but which do not have the specified
  permission, <strong>excluding group "AnyOne"</strong> (which implies the returned {@code Sett} can't contain
  {@code null}).