Added isReal and groupHasPermission checks.
Add organization perm checks and 'set' param.