Steps to reproduce:

1. Add user groups add Group A and Group B
2. Navigate to the user management and add some two users user1 and user2 
3. Give permissions for group A as read only for host group A. Give permissions for group B read only for the Host group B. 
4. Create ITServices for different host groups A and B.

Result:
When a user logs with a Group A and has permissions for only that group he can see all ITServices for A and B
When user B logs in with permissions for a B group he gets to see all ITServices for A and B

Expected:
When user belongs to a Host group he should only be able to see ITServices for that group. Otherwise they should not be able to see any IT services in the first place.  This means that every customer is able to see the other one and their performance. This is a big problem  as we  need separation for different SLA's.