Umm.. A group called "myGroup", a user called "webuser", and the role is called "webuser". Why is the user name and role name the same? Could that be it?