Never mind about the patch. Looks like the problem is that sometimes permission->data['groups'] is keyed by id and other times by name. Haven't figured out why yet. -Jason