Access control improvements

* Don't show the link in top if user has no access
* Update changelog_access_groups parameter if selected group name is changed
Use bb_group_params hook to mark used group
Not safe to use the DB objects in checksetup parts