issue #20549: users can get extensions from group