restrict group details to login users