changed way group access is defined for non-members