added permissions for group users