It appears that this filter is ran for every file which has ezpublish configuration defined.

So, if there are any files with ezpublish configuration, but without siteaccess groups config, this causes an exception.