See https://spaces.internet2.edu/display/Grouper/Grouper+Bug+GRP-928+-+Grouper+UI+allows+unauthorized+users+to+view+the+privileges+of+other+subjects