Locking down geoserver security hides layer groups from wms1.1.1 getCapabilities document

Description

By default the data security is:
..r=*
..w=ADMIN,GROUP_ADMIN

But when following the Locking down geoserver documentation page and giving read rights also to the ADMIN and giving individual workspace read rights to * (everyone), then anonymous (logged out of the GeoServer gui) wms1.1.1 getCapabilities document does not show layer groups of that workspace. The individual layers are present. It works correctly in 2.10.0

Environment

GeoServer 2.16.0
Tomcat 9.0.22
Openjdk 12.0.2
Centos 7.6

Status

Assignee

Unassigned

Reporter

Maario T

Triage

None

Fix versions

None

Affects versions

Priority

Medium
Configure