KNL-1419 Only send notifications to site members.

If a user is a member of the global review realm and has the content.all.groups permission then they get all notification message even if they aren't actially a member of the site. This prevents non-site members from ever getting a notification.

kernel/kernel-util/src/main/java/org/sakaiproject/util/SiteEmailNotification.java

@@ -131,12 +131,12 @@ protected List<User> getRecipients(Event event)
 				users.retainAll(users2);
 			}
 
-			//only use direct site members for the base list of users
-			refineToSiteMembers(users, site);
-
 			// add any other users
 			addSpecialRecipients(users, ref);
 
+			//only use direct site members for the base list of users
+			refineToSiteMembers(users, site);
+
 			return users;
 		}
 		catch (Exception any)