fixed rights checking for group