auth role group fix