Properly documenting the AccessDeniedException as thrown by ItemGroup.read (and methods that call it).
Also making DISCOVER permission be implied by READ, which is natural since it is only checked if READ is denied.