[Geoserver-users] Group Layers always visible in Preview and getCapabilities

Hi,

I have a Group Layer that consists of several normal layers. All normal layers and group layer belong to the same workspace.
The workspace data is only viewable by a certain user ([workspacename].*.r setup in Data security with hidden setting). As expected the normal layers are hidden from all other users. The group layer on the other hand is visible both in Layer Preview and getCapabilitites to every user. The actual data of the group layer can still only be viewed by the correct user but I don’t want them to show up at all for the other users.

I’ve used both version 2.7.0 and 2.8.2 with the same results.

Have I missed something or is this how group layers work?