I have come across another issue with me under standing permissions. I have two primary albums and each has at least one subalbum. I have setup one group to have access to one album and the other to another album. I have something set in the permissions of the group, that still allows the group to see both albums even though under managed albums it is not selected. Not sure what I have selected that is doing it but any help would be appreciated.
Comments
If the gallery (site) is private no one except with rights should be able to see. Otherwise anything that is published and not protected is public viewable. Anything that is unpublished but not protected is viewable if you know the link to it.
Just adding albums or other items to the managed items list does not protect anything, it's just about editing on the backend, not viewing on the front end.
If you still think there is anything wrong, we will need detailed info what you set to each group and how the albums are setup so we can try to reproduce it.