fix permissions on group page