I want to restrict access to Quote or a Transaction in Oracle CPQ based on the User Groups

Summary:

Requirement 1: I want to restrict access to Quote or a Transaction in Oracle CPQ based on the User Groups

Present implementation- I have setup the Steps > Participant Profiles > Adv Forwarding Rules (AFR) such as the following

1. Active (Step)
   1. Sales Agent (Participant Profile) (User Access Rights tab and Groups and Performer Steps = not selected and all are empty)
      1. Advanced Forwarding Rule - a BML script that checks based on the OU on the Quote (an attribute that has the OU), grants access to the User Group and the Profile

Problem Statement- A User from OU2 is able to open the Quote (from OU1) from the Transaction Manager. The Quote is in Active step. What we want is that the OU2 User shall not be able to open the Quote.