New 'User Group' implementation of permissions. #2