SysGroup as AclSid
SysGroup should extend AclSid. It should have principal = false and discriminator type = 5.
Changes to sysGroup.isEnabled property should toggle the aclSid.active value.
On user login, only active group should be included in granted authorities.
Update liquibase.