Hi, can you run the following curl commands against your sync_gateway and report the results against what you expect to see.
curl -X GET http://user:password@yoursyncgateway:4984/yourdb/_all_docs
curl -X GET http://user:password@yoursyncgateway:4984/yourdb/_changes
Both of the above commands will filter the documents based on the channels the user has access to.
Andy