accessible_groups not using ldap code