less sql, more python
user/group selection