Instead of hardcoding group slugs (which have been wrong 3 times already), we should add an authorization enum or something to groups that we fetch