Add support in security module to check access for a group

Currently, the API of the authorization manager only support checking access for users. It you pass a group reference, the access is always denied, since the group is taken as a user, and matching that group against user rules never match.