Question
Is it true the field level security of a field used in the criteria for a list view is ignored? Or is this a bug?
Background
I created a new formula field that's true if a user lookup on the a record matches the current user and then used this to create a list view. However when I logged in as a user who didn't have visibility to that field the filter wasn't applied. Making the field visible to their profile fixed the issues.
Have I been drinking crazy juice and this is expected behavior or is this a bug?