I notice that when you assign a group to a window action,
other users not in the group can still access/execute that window action.

Example:

I have two users:

• User1 member of Group1
• User2 not a member of Group1

Now I add Group1 in Security tab of Invoices window action.

When User2 is logged in and clicks Customer->Invoices, he can still open the 
Invoices which expected he should not since the action has "Security" groups already 
assigned.

How do we accomplish this?