If this stays too counter-intuitive, revert this commit, 672c3f35 and 7fe659bf. IMHO, the user who enables the record access-filter knows what he does.