I am using version 9 of sitefinity.
I have 2 libraries: 1. Enterprise-only and 2. EveryoneCanSee
I have 2 roles and 2 users, each with 1 role. Refer image attached.
Both these libraries are added to a page (image
at end of doc). No matter which user logs, they both see both the libraries as well as documents
from both libraries.
In order to permissions to work on document library, it is not sufficient, though necessary to set the permissions on the library (root : as per documentation), it is also needed to setup a flag in the security settings in back-end > [Top menu] Administration > "Advanced" link > security left menu
Check on the check-box for: Enable filtering queries by view permissions
This will in turn modify config file "securityConfig.config". So you need to rebuild solution (just compile didn't help).