non-members should not view private charts/dashboards of groups