use .by_acl in GroupsController#show
use ACL in GroupsController#index action