If this stays too counter-intuitive, revert this commit, 672c3f35
and 7fe659bf.
IMHO, the user who enables the record access-filter knows what he does.