Ensure that group check doesn't wipe out non-group-specific caps

This could allow anon users to edit group docs in certain cases