The commit diff shows critical fixes in both functions:- 1) In get_data_access_information, groupmode calculation was moved outside conditional blocks to ensure consistent group validation. 2) In add_entry, redundant groupmode calls were eliminated to prevent context mismatch. The accompanying test cases (test_get_data_access_information_groups and test_add_entry_invalid_group) explicitly validate that these functions now properly enforce group permissions, confirming they were the vulnerability sources. The CWE-89 mapping aligns with improper SQL query scoping due to missing group validation.