[pubfile] raise 404 if grp is not pub