I have created an SOI for layer level access and on the rest page the layers allowed to be viewed by a specific user are shown properly, but when service is added to a map all layers are visible. In the requests made from the map to the rest service "layers=show" is sending a request for only the layers it should, but everything is returned. If anybody has run into this problem or has any suggestions let me know. Thanks.