With the relationship field type, you can specify all open records or those in specific channels - but this seems to ignore the user’s rights access.
Say there are 3 channels for content, and the relationship fieldtype defaults to show all open records. A user logs in who’s Group allows access to only channel 2 (for instance).
Currently, they would see the relationship field and every record in the system. Would it not make sense that the only records that user sees are those they have explicit access to? The list should be populated with open records only from channel 2, not all channels.
Admittedly we could select channel two, but what happens when another user is added with access only to channel 3? The field now points only to channel 2; we’d have to clone a new field with relationships to channel 3, and keep doing this for every new limited user. This gets messy fast.
Considering how groups should limit what a user sees, the Relationship field seems broken.