init_groups_visitor() was still using old array of id output (not the newer array of hash which we need for permission queries)

view/php/theme_init.php

@@ -42,6 +42,9 @@ head_add_js('library/colorbox/jquery.colorbox-min.js');
 /**
  * Those who require this feature will know what to do with it.
  * Those who don't, won't.
+ * Eventually this functionality needs to be provided by a module
+ * such that permissions can be enforced. At the moment it's 
+ * more of a proof of concept; but sufficient for our immediate needs.  
  */
 
 $channel = get_app()->get_channel();