Steps to reproduce:

1. Clean installation of Ibexa DXP v3.3.
2. Edit Article Content Type and edit Image fieldtype, select all Content Types in Allowed Content Types.
3. Create a new Role and assign the following policies to it (including a new user):
   
4. Create new Article Content Type and during creation selection relation to Image.
5. Click on Users -> check button is not visible, this is correct.
6. Click on Ibexa Digital Experience Platform.
7. Click on Users again -> check button is visible, this is incorrect.

Result:
You are able to select Users folder if switching between allowed Contents and forbidden Contents.

Expected result:
You shouldn't be able to select Users folder.