fix term group add bug
update permissions, simplify roles