fix(groups): check permissions on cluster/resource for actions on con…

fix(groups): check permissions on cluster/resource for actions on con… #1765