use more consistently permissions about usergroups' management
few cosmetical changes in code