Class based access usergroup processors

Related to #11437 

Also fixed javascript error when  no policy is chosen in create/update windows