Ensure permissions can be propagated via group owner_uuid attribute.

Closes #1945
Closes #2022