groups.php, permissions, database, ajax-handler