Does nVision Windows Client respect business unit security?

We are on 8.56.12 PeopleTools and run our 2-tier nVision Windows client on a terminal server to which all layout creators have access.  We utilize business unit security and on the web/PIA, that security seems to be respected when users try to access a report request that was set up under a business unit to which they do not have access.  However, in 2-tier, the users are able to access any report request (if made public or shared) regardless of what business unit the report request is attached.  Is this functioning as designed or did we miss a configuration setting