Restrict access to Group not working

I changed reader access to our “All Notes Users” group to a select group of people. I tested this with a user not in the list, and they do not see the group in the list of addresses. I assumed the users not listed would not be able to send email to this group and after reading hundreds of entries on this site, it seems like they should get a delivery failure. Today our H/R manager sent a memo to “All Notes Users”. A user not listed in the group’s reader access must have done a reply to All, because the H/R manager’s address was in the “To” field and the “All Notes Users” group was in the “CC” field. Needless to say, everyone in our organization received this guy’s email. And no, ‘all readers and above’ is not checked and this guy’s name is not even in the list of readers. What’s the deal?

Subject: Restrict access to Group not working

Hello,

The thing is, your security is working, in that it prevents that person from being able to see the document when they are in the database. But sending an email does not require one to enter the NAB. The mail routing is being handled behind the scenes.

Did this person receive the HR email because they are in the group document? If so, why not just take them out of the group? If not, then perhaps someone forwarded the email to this person. Either way, controlling who can read the group document should not effect who can send email to that group. Someone please correct me if I missed something.

HTH,

John