Protect group documents according to group privacy

See #921