Fix permission check for groups_by_owner

aleksis/core/schema/__init__.py

@@ -157,9 +157,12 @@ class Query(graphene.ObjectType):
 
     @staticmethod
     def resolve_groups_by_owner(root, info, owner=None):
-        if owner and info.context.user.has_perm("core.view_person_rule", person):
+        if owner:
             owner = Person.objects.get(pk=owner)
-        if has_person(info.context.user):
+            if not info.context.user.has_perm("core.view_person_rule", owner):
+                raise PermissionDenied()
+
+        elif has_person(info.context.user):
             owner = info.context.user.person
         else:
             raise PermissionDenied()