working version of groups->users (add remove users+permissions)