On that rule we try to DENY all rights (including READ) of EDITOR user but still on “show as” the EDITOR user visualises all information on screen?
If we check the Access Rules view with the same user, the screen hides the information as expected. I did not test in a real situation but at least the simulated use seems to fail the display? This is self hosted installation.
This is the correctly “hidden” READ information on Access Rules display (simulated) for EDITOR user:
While here the “hide” seems to fail > we can see data even if condition for EDITOR role is DENIED for ALL.
Best,
Tomas