Added group permission checking into the main CMS.  Each module may now specify what groups are able to perform subactions on each module.