Group privilege check refactoring