flags also need groups which need permissions which need content types