Oops ... I did find out what it's all about. I created just 1 test profile and was using the admin profile as the second member. That's why the privacy settings were overruled. My apologies for bothering you with a non error :-)