User can view details of User Groups that he can't manage

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.0.X EE
• Fix Version/s: 6.0.X EE
• Component/s: User Management, User Management > Roles
• Labels:
  • QA-KC
  • QA-R
  • ee-ts
• Branch Version/s:
  6.0.x
• Backported to Branch:
  Committed
• Story Points: 2
• Fix Priority: 4
• Git Pull Request: https://github.com/dustinryerson/liferay-portal-ee/pull/147

Steps to reproduce-

1. Create a Regular Role (RR) with permission User Groups Access in Control Panel
2. Create an user1, and add the role.
3. Create an user2, and user3
4. Create an organization Org, and add user1 and user2 to the Org
5. Create an User Group: UG , and add user2 and user3 to the UG
6. As user1, go to Control Panel > User Groups

Result: User can view UG and a link over the UG and the action "View members". After view members he can view the user2 in the list ( user2 belongs to the same Org )

Expected: User can view the UG but no action can be performed over it, he doesn't have any permission over the group.