MgnlUser#inGroup(String) is very shake. When debugging I found that in many cases it'll return false where as it should actually return true. Looks like the reason is because values of various properties are collected and later interpreted as uuids. In case they actually are we might be lucky - else we get RepositoryExceptions that are kind of swallowed and we simply return false.