[#1665] Fix bug where we wouldn't get the group list even though we were authorized

The problem was that we checked if there were roles with 'manage_group'
permission and returned an empty list if there weren't, even if the user
calling was a sysadmin (that didn't need a role with 'manage_group'
permission).