New authorization concept - Access to data

Hello, i'm new in SAP BW and i'm in migration process to the new authorization concept.

Here is what happening:

I have a role with all access to a company (*) of a provider X.

I have another role with restricted access to a company (ex: COMPANY1, COMPANY2 and COMPANY3) of a provider Y.

When i attribute those 2 roles to a user and access a query of the provider Y, i can see all the companies when it was supposed to only see the 1, 2 and 3.

What am i doing wrong?

Thank you in advance.

João Gonçalves