Hi there, see gif:
http://g.recordit.co/D2b8XErJWs.gif
Can you please have a look?
Please raise an issue in github. Loos like, tree view does not check user permissions.
here is comes:
https://github.com/frappe/frappe/issues/2994