[Bug]: Groups excluded from 'creating link shares' are also excluded from 'viewing' link shares

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

Groups on 'Exclude groups from creating link shares' in share settings are blocked from viewing link shares. (public link, public share)
Their members see the 'Page Not Found' error when entering the link unless they log out.

Steps to reproduce

1. Add a group to 'Exclude groups from creating link shares' in administration settings.
2. Log in as a member of the group.
3. Access via link share.

Expected behavior

The selected groups should be blocked from only 'creating' public link shares.

Installation method

main instance - Nextcloud AIO Docker Image
test instance - Fresh community installation with archive

Nextcloud Server version

28

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.2

Web server

Nginx

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Fresh Nextcloud Server install

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

No source file or test is named. Start by reproducing the issue using the listed administration setting and link-share steps, then trace the group restriction handling for creating versus viewing shares. Done means members of excluded groups cannot create public link shares but can view them while logged in.