Time Data Security Policy Enabled on Time Management Pages

Summary:

We have the profile option Time Data Security Policy Enabled on Time Management Pages enabled. We now see the following behaviour: Line managers can now access and approve their own timecards through my client groups.

Content (please ensure you mask any confidential information):

We have reviewed this doc which reads "If you don't define a time data security policy and enable the related policy option, time and labor managers won't see or be able to search for anyone." ()

What if we have a time data security policy and enable the related profile option, would this have caused this behaviour? Please provide more guidance on how this profile option works exacxtly.