Prevent listing members of a public group

!1151 (merged) allows any user to list members of a public group which should not be possible (public attribute on groups has a different meaning as for corpora).
Retrieving details of a group should also return a 403 for clarity