Yet another fix of default group permissions