fixup "allow to change badge group only if can.user.supervise"