add: user->groups authorties