Fix rights on dynamic groups and deploymirrors. closes #2751