"Add a block" contains blocks regardless of access restriction settings defined with Views module

How to recreate:

1) create a new block display with Views module
2) assign its access permission to a certain role, eg. Administrator
3) create a dashboard with homebox
4) go to your homebox Layout configuration and add that block
5) logout and login back as a user who is not assigned with a role from 2)
6) visit the dashboard and click "Add a block" <--- the block shouldn't be here, but it is!