Some refactoring and user check when updating groups
Authorization