Fix possible permission leakage

If a certain permission was removed on a Group, it didn't explicity
removed the permission from the database. Therefore, removing a permission
from the Group in the command didn't have effect on the production area.

This could lead unattended permissions on a Group.