Fix hasAccessAndIsOwner logic

* The check always returned a 403 error unless it's an admin.
* Use Sentry inGroup method instead of looping through all groups.