Support contacts & organisations only in root group

We decided that contacts can be created only in a root group.

We need to make sure everything is working as expected

• don't display the enable option in sub group settings
• don't display the menu item in sidebar of sub groups
• make sure only users with Reporter+ role in the root group can access the contacts
• check and prepare services when changing the groups structure