How to segregate Manage AP invoice and Manage AP payment by business unit

Summary:

Hi,

User has a business scenario that they can manage invoice for several business units, but can only manage payment for one specific business unit.

To test it, I tried to grant a testing user account standard Accounts Payable Invoice Supervisor and Accounts Payable Payment Supervisor roles, each with access to BU A and BU B respectively, so that this user can only manage payment for BU B.

But it doesn't work, this user can manage payment for both business unit A and B.

Does Fusion support it? Accounts Payable Payment Supervisor has a data security policy on Manage Payments By Business Unit with condition: Access the business units for which the user is explicitly authorized, so it seems to me that if I assign business unit B access only to Accounts Payable Payment Supervisor, the user should be able to manage AP payment for BU B only, but it does not work.