Segregate access to products

Hi,

I'm trying to configure the system so a set of products can only be allowed to be requested to a particular set of users.

This is supposed to be configured using the IT Shop, so I create 2 IT Shops, and divide the applications accordingly. But if I access with a user that is not a customer of a particular IT Shop, I still can see all applications regardless that some are in the Shop where the user doesn't match the customer condition.

Am I missing something?

Any suggestions?

Thanks,

JM