Issue #2318225 by draenen: Fixed Users able to view other users' Membership even when permissions forbid it.