[FIX] base: security: employee must have access to res.groups