implemented UserGroup permissions