fixed bug in group effective security