fix: group permissions in filter rule interface model