Don't reveal hidden groups to non-members

Adjust access check when the group is a hidden group. Site admins
should be able to see anything.