more defensive access to group workspaces