Protect user group permissions in using Firebase rules

[felko]

Similar to the rules that were added by #126 to protect deadlines from being accessed to unauthorized users, groups should benefit from the same protection.