make groups and campaign permissions a bit more robust