I see that ACLs allow one to permit a user role to view selected Groups, however, something is enabled somewhere allowing all users to view all the Groups. I don't have the permission setup allowing the user role to Edit Groups... so why are they able to view all the Groups?
Ideally, the non-admins would only be able to view Groups that are added via the ACL.