hasAuthorization for group members