user_access_policy() updated - group admin check added.