Could it be possible to have the choice to allocate the rights based on Roles rather than Groups?
It seems easier to have akind of unicity between role and section as a Group may have several Roles.
but I guess that both are usefull as it really depend on the use case.
Best regards