Data Access Profile BPC 10.1

Hi All,

I have one model with 2 secured dimensions (account and entity). One data access profile has been created as below:

for account : select some property and give read and write access.

for entity    : select one member and give read and write access.

I have assigned data access profile to the user . but still the user can access the other unauthorized member.

Do I miss something?? As far as I understand, the latest bpc version shall cover matrix consolidation,rite?

Thanks.