I extended Authorizer and modified controllers where applicable, even though here we need hostgroup included because of views it's a good idea which may be handy later