group_ids
Add `sudo()` to call `get_param` where necessary, and make the web client use a controller instead of directly accessing parameters.