Defining permissions for a REST API endpoint which returns a sub-collection of a resource

Question

I\'m trying to figure out what\'s the best way to assign permissions for a sub-collection of a resource.

For example,

• GET /groups/{id} requi