Only publish user groups that the user has permissions for