Permission Bug in Redactor using Craft Version 2.6

[tombauer]

We are using the Asset Subfolder Access Plugin to manage the upload/view permissions for several user groups. The Plugin works great with Asset sources and also in the Assets Fields. But since update to the current Craft Version (In Craft Pro 2.5.2740 it worked without problems), it does not work anymore with the sources in Redactor. In Redactor it shows now all sources and it's also possible for users to upload files to these sources, even it's not permitted through the Asset Subfolder Access Plugin. Here is a simplyfied example of our configuration:

One asset source called test

One test group with one test user. The group has full access to the test asset source.

The assetsource has two subfolders

In the Asset Subfolder Access Plugin we have set the access for the test group to one folder only.

After login as test user the user see only the single "otherusers" folder

Editing an entry with a Downloads-Field and a Redactor-Field

Clicked on Downloads-Field "Add an asset" works perfect - shows only one Folder

Clicked on "File" in the Redactor field does not work - shows all Subfolders and it's also possible to upload files to all folders