You can click on a group only if the current user has at least read access to it.
ObjectSecurityModel Class | com.plumtree.portaluiinfrastructure.editor.commonpages.objectsecurity Namespace