add xmodule.modulestore.path_to_root, hierarchical group_access checks