PME 5.1 CE not implementing security on BA 5.1 CE?

I've published a metadata model that sets a restriction on a field to a certain Role. I've then published a report that was created using Pentaho Report Designer that displays the field. I then logged in to a User that does NOT, according to the Metadata, have permission to see that field. However, when I open the report, the User is still able to see the field that should have been restricted to a Role which the user is not part of. (Note, none of the Roles/Users in question are Admin and do not have free access to all data).

What might be the reason why the security on the field implemented through PME wasn't implemented on the report created using PRD (both having been successfully published on the BA Server)?