Multi-group users

and faster permission checking.