connections now take groups into account