(ITS#8079) nssov usergroup check always fails (patch)