[Flow] Content security does'nt work

[Falk]

Hello together,

I've problems to limit the entities access via Policy.yaml which should be simple according to the Flow documentation.

I try in a very basic test to limit the access on all contractor entities where the property company is "Muster GmbH" and it does'nt work. I get always all contractors. I've no Idea what the problem is. 

Here my Policy.yaml ... https://gist.github.com/vixe76/a3dc744e5dcd7b25ef44

I'm thankful for each hint.

Greetz Falk