Check group permissions in layer_acls
Check groups in search perms
Fix import in security/auth.py