allow everyone to access public group but not modify; fix tests