if i['group'] not in t['groups']:
            raise AuthError('unable to write to %s' % i['group'])