Users can see domain they don't have access to in the Publish tab

When listing the publication trees, there is no check done on the Domain linked to the publication tree: an user can see domain title even if he does not have READ access to the domain.

If the publication tree is linked to a Domain, check the READ permission before accepting the tree.

If there are publication targets set on the Workspace, before accepting a publication tree, check that there is at least one publication target with READ permission on the Domain linked to the tree.