add participant check

group_required allows admin access to any protected resources. adding
explicit participant check.