We are encountering a very strange issue.

Normal registered users are restricted from seeing categories with access level that doesn't contain their usergroup - this is working.

CB moderators (not super users) are able to see groups in every category even though they are not the group admins nor member of the groups, even though the access level of the categories do not include their usergroup. We believe this is not working as intended?

Strangely still, some groups are permanently hidden from these CB moderators no matter what category access level is set. Duplicating these groups will then show the new groups - which then cannot be hidden (same as issue above).

Also, even unapproved or unpublished groups (regardless of category access) are visible to these CB moderators. Is this intended?

Would anyone have any idea what is going on?

Nvm about the last part of the thread, just remembered we used CB Conditionals to hide certain groups from specific group of CB moderators.