RemoteApp User Assignment ignored

Hi all, I am building a new RDS setup and need to assign different resource collections to different user groups in the domain. I have one gateway, one connection broker and several session hosts. The problem is that all RDS users for some reason see all collections and apps in RDWeb user portal, completely disregarding the user/group assignments on collections and apps. Any ideas? Regards, Ruslan