Test procedure: Hubzilla member X published one article A with access permissions for group XY. Article A has the URL https://gerzilla.de/articles//article123
. Hubzilla member Z isn't member of group XY and insert the URL  in one publicly accessible post P. Incorrect behaviour, bug
Hubzilla insert the complete content of article A in publicly accessible post P.
Bug report "Hubzilla ignored permission settings for mentioned articles" - https://framagit.org/hubzilla/core/issues/1334