Now respects permissions for user, group, group tree, role and extranet