Parent level data security question

Summary:

Content (please ensure you mask any confidential information):

Hi,

Got a weird issue on data security at parent level, and see if anyone has insights on this.

Assuming in Entity dimension with a hierarchy and data as below:

Assuming a user is provisioned for READ access to Total Entity (member only), WRITE access to IDESCENDANTS of Parent 1, No Access to IDESCENDANTS of Parent 2.

When the user look at data at Total Entity, he's supposed to see $300 from Parent 1, from my understanding. However, the user sees $1000 from both Parent 1 and Parent 2. This is bit confusing, because Total Entity is Dynamic Calc on aggregation and the user don't have access to Parent 2 (when zoom in from Total Entity only Parent 1 is shown), how could the data from Parent 2 being presented to the user at Total Entity?