db/authz: revoke permissions at user deletion

Created by: unknwon

This PRs fixes #7302, which revoke user permissions when a user is deleted (regardless of a hard delete).

Manually tested and unit tests are added.