Issue occurs only against a user's secondary group. If two users belong to the same primary group, they can both write to the same directory that is writable by their primary group.
As a workaround, removing the following option from /etc/default/nfs-kernel-server fixes the group permission issue. RPCMOUNTDOPTS=--manage-gids
