set a users permissions for given grp

will probably combine with existing method