Add group access control
Use bb_group_params hook to mark used group
Not safe to use the DB objects in checksetup parts