Why do users see resources from other people's resource groups?

Question

MODX

Please, prompt
There are 3 groups of resources:
Administrator
GroupResource1
GroupResource2
The group of users is attached to everyone. Each user is expected to see resources from their own resource group.
In practice, for some reason, it works differently. If the resource is attached to the Administrator resource group, then everything is fine, only admins see it.
But if, for example, the resource is in GroupResource1, then it is seen not only by the user whose group is linked to GroupResource1, but also by the user with the GroupResource2 binding. Well, vice versa too.
How to make the user see only their own resource groups?