fix group endpoint for non admin users