I am puzzled by this scenario:

I have two users: UserA  and UserB

There are several contact records where UserA is the creator.

UserB creates a CONTACTB

UserB is placed under a group groupB  which has read access to both res.partners and res.users

I have a record rule on model Contact with the following domain filter:

[('create_uid', '=', user.id)]

Associated to this rule is the groupB which useB belongs to.

When userB tries to query Contacts, it can gets an ACCESS ERROR, saying that userB doesnºt have read access to res.users. This message is shown on a pop up. When you close the popup, the expected result there, only record CONTACTB.

WHY there is a access error on res.users? More over, is it possible to suppress the popup since the record rule seem to be in effect?