[FIX] website_hr: give public group the right to read resource.resource records