[IMP] ir.config.parameters: support group-based access control