on eq group page, fully support adding permissions (manager and consumer) for users and inst groups that are already in the system (does not yet support adding new users directly from LDAP); fixed a couple of minor issues/bugs in this functional area; remove some extraneous data from group presentation; tweak group editing layout a bit