Affects Version/s: 6.1.0 CE GA1, 6.1.10 EE GA1, 6.2.0 CE M2
Steps to reproduce:
1. Add a role with permission to see Users and Organizations in control panel (under Control Panel: Portal/Users and Organizations -> Access in Control Panel)
2. Add user A and assign him the role created in 1.
3. Add a couple of organizations (e.g. A,B,C)
4. Log in with user A, go to control panel and click Users and Organizations
User A can see all organizations even though user A is not a member of any of them and doesn't have portal scope VIEW permission for organizations.