add repo-side webscript to fetch granted site groups and to save new associations