fixed bug with credentialgroup access