dialog for selecting access (groups/users); groups saved to db; function userHasAccess(group_id)