[FIX] security: res.groups should be readable by admins only