CORE: updated with group specific permissions