VBCS BO level security issue

Summary

VBCS BO level security issue

Content

Hi Gurus,

I have created a BO and 2 roles - Manager (assigned my user id to it) and Employee.

In the Security tab of BO, I have removed all checkboxes (View. Create, Update and Delete) against Employee and for Anonymous user it was already removed. 

When I go to Live mode, and select "Employee" from "Who Am I" then Employee is still able to access BO, and perform all CRUD operations on it, eventhough I have removed all the checkboxes against Employee for that BO.

When I removed check boxes against "Authenticated User", then Employee role is working as expected and not able to access anything in BO.