Questions Restricting access to sub accounts by segment value - group type A

Hi All, 

I appreciate it if you can have a look at my setup and advise where I have gone wrong. 

Expected result is : A user who doesn't belong to a location ( segment value) should not be able to see/ select a sub-account which they don't belong to. 

my setup: 

Sub account segment value: 

 type A restriction group: Location CRN ( cairns)

I have added the user to the group and sub accounts which their second segment is related to Cairns selected. no GL is restricted only sub accounts by segment.

my expectation when I log via the user account to the Purchase order module I should only see the subaccount by segment 2 value starting by 51 for Cairns but I see all. 

 another thing I cannot figure out why is showing this value is when I go to screen GL104040 restriction group by subsegment it shows segment ID 1- main which is not my subaccount segment I should be able to select 1 or 2 but none are showing here !

  Thank you