upload now reads groups from db

(For the the permission level)