Access control is broken in 1.4.6

[kenr]

In V 1.4.6, unauthenticated users (Guest) and other users that have only access to a few of the systems we monitor can see all actions, maps, screens, graphs, and IT services i.e those that relate to systems for which their user group is set to Deny.

[noxis]

We created an "ALL" host group. Added all the hosts then added a Deny for guest to the "ALL" host group.