Regarding entity permissions and entity list showing values for all contacts.

HI there,

I'm having an issue where I am able to see all records in an entity list, despite me having configured entity permissions correctly (as far as I'm aware) as well as enabling them on that particular entity list.
I have it in contact scope, with a relationship called "portal user" which I can confirm is getting populated every time a record is being inserted. 
I've also ensured that web roles are on the permission correctly, and that the user I am testing with has the correct web role.
Any help on this would be appreciated.

Kind Regards
Josh Grant