Fix up custom group authorization