fix group management in permissions form