In a multi-tenant situation where customers can view their own hosts, based on host-groups, when they select the monitor/services page, they are able to see all defined services, including the services related to hosts to which they have no rights to view.

We have host-groups setup like this:

customer/A
customer/B
customer/C

and user-groups matching the customers A, B and C

Users belonging to user-group B can only see the hosts of customer/B. This works excellent everywhere, except for services. Here the same user of user-group B can also see services defined for hosts belonging to customer/A and customer/C ...

This makes the services section practically unusable in a multi-tenant setup, and that's a real shame. My customers are requesting uptime-reports, and this would be the ideal place to show them that information.