Problem: Currently, when publishing an artifact to Organization level and selecting specific groups, the group selection acts only as a notification layer—it does not restrict access. All workspace members can still view the artifact regardless of group selection. This is: Misleading UI — the "select groups" option suggests access control but doesn't provide it A security concern — sensitive, department-specific artifacts cannot be truly restricted Incomplete for governance — no way to enforce department-level access control for sensitive content Requested Behavior: When groups are selected during Organization artifact publishing, access should be restricted to those groups only. Unselected workspace members should not be able to view the artifact. Use Case: Department-level access control—e.g., Finance department artifacts shouldn't be visible to all workspace members, only Finance team members. Current Workaround: Keep sensitive artifacts Private (but this prevents broader sharing within approved groups).