Correct handling users belonging to groups