[group] add 'members' tab
[group members] can be visited only when view_perm is not 'pub'