Issue with record level, role based security

[morphace]

I'm using OrientDB 1.5.0 and might have hit an issue with the record level, role based security.

Here is what I run in the console:

connect local:/Users/markus/orientdb/OrientDevDB admin admin          
create class Test extends ORestricted
alter class Test custom onCreate.identityType=role
insert into orole set name='role1', mode=1
insert into orole set name='role2', mode=1
update orole put rules = "database.class.Test", 15 where name = "role1"
update orole put rules = "database.class.Test", 15 where name = "role2"
insert into ouser set name = 'user1', password = 'user1', status = 'ACTIVE', roles = (select from ORole where name = 'role1')
insert into ouser set name = 'user2', password = 'user2', status = 'ACTIVE', roles = (select from ORole where name = 'role2')
connect local:/Users/markus/orientdb/OrientDevDB user1 user1
insert into test (field) values('xxx')
connect local:/Users/markus/orientdb/OrientDevDB user2 user2
select * from test

----+-----+-----+------
#   |@RID |field|_allow
----+-----+-----+------
0   |#11:0|xxx  |[1]  
----+-----+-----+------

But the select should return no rows, because user2 has a different role (role2)?