Ensure that there is proper server validation for the info group-type

[olofenglund96]

Currently one can change some code in the browser and be able to send messages to the info groups without actually having permission. Validation needs to be implemented in the server.