Fix BasePermission.assign for group perms

Rebased version of pull request #27

fixes #26