Users can see members in approval list, which are not assigned to users as owner

Summary:

In My application(Rev cube and capital cube), we are using cell level security to limit access to certain cost centres in REV cube, although user has access to "Total Cost centre" descendants in Capital cube. We have set up cell level access as deny read for any cost centres to which users shouldnt have access in Revenue cube.

This works fine and user can see #noaccess in the forms.

However we also have capital approval unit (set up at -"total cost centre (primary dim) and each project(secondry dimension)
in revenue,we have Approval unit set by each cost centre and assigned owners to that.