def group_finder(user_id, request):
    if not user_id:
        user_id = request.POST.get('user_id')
        if not user_id:
            return
    q = DBSession.query(User).filter_by(id=user_id)
    u = q.first()
    if not u or not u.status:
        return  # None means logout
    r = []
    q = DBSession.query(UserGroup).filter_by(user_id=u.id)
    for ug in q:
        acl_name = 'group:{gid}'.format(gid=ug.group_id)
        r.append(acl_name)
    return r