Added permission check for group administration