simplify permissions for groups and user
spring cleaning