#797: Start work on hierarchical groups and permissions.