'Denied access' and 'not imported' in log, but rest-client get all data from service method

public List<Invoice> getInvoices(LocalDate dateFrom, LocalDate dateTo) {
	return dataManager.load(Invoice.class)
		.query("e.dateTime >= ?1 and e.dateTime <= ?2", 
			dateFrom.atStartOfDay(), 
			dateTo.atTime(LocalTime.MAX))
		.list();
}

When jmix.authserver.client.myclient.resource-roles = rest-minimal rest client get empty list and one line in log:

io.jmix.core.AccessLogger : Denied access to [entity 'x_Invoice' create, read, update, delete] for user [my-client] by io.jmix.securitydata.constraint.CrudEntityConstraint

When I add to jmix.authserver.client.myclient.resource-roles resource role with read access to entity and read access to all its attributes (source = database, scope = API), rest-client get list of entities with all them attributes values.
But there is one line per any returned list element in log:

io.jmix.core.AccessLogger : Denied access to [x_Invoice:  not imported = [dateTime, num, supplier, sum, id, ... ]] for user [my-client] by io.jmix.security.constraint.ExportImportEntityConstraint

Whats wrong ?

Hi,

I’ve created the issue. Thank you for reporting.