Added deny operations, but are now commented out. Groups are priority + grant/grantView separated now.