`null` checks for ipPermission and group?