Recruiters see job requisitions they're not expected to see based on AOR

Summary

Recruiters roles are secured by recruiting Organization, but when recruiters look for candidates they're able to see and edit all the requisitions candidates have applied to

Content

Hello, 

We're creating roles for recruiters so that they should see only job requisitions for the Organization they are used to manage. In order to do that we have created Job Requisition Security Profiles, then we have created an AoR for each recruiters selecting the Organization (field "Recruiting Org Hierarchy") they are responsible for. 

As of now, recruiters only see Job Requisitions for the Organization they are responsible for in My Client Groups > Hiring > Job Requisition. That is correct , as it is what we expect when setting the AoR. However, when they do search for candidates in Candidate Search and go to "Activity" tab for a given candidate they see all the job requisitions the candidate has applied to (even if organization does not match with their AoR). Clicking on the requisition name they can see all details, they're able to edit them, schedule interviews, move the candidate etc.  This is