While testing the SQL filter (layerFilterSubsetString) on the "restricted" layer I noticed it works well if you add just that WMS layer.
But if you have a group that contains the "restricted" layer, then the filtering is bypassed and the Group shows all the data (although only some of the data in the "restricted" layer should be shown)
Testing the Access Control Server Plugin ( https://github.com/elpaso/qgis3-server-vagrant/edit/master/resources/web/plugins/accesscontrol/accesscontrol.py ) and I noticed the following:
While testing the SQL filter (
layerFilterSubsetString
) on the "restricted" layer I noticed it works well if you add just that WMS layer.But if you have a group that contains the "restricted" layer, then the filtering is bypassed and the Group shows all the data (although only some of the data in the "restricted" layer should be shown)