System is latest patch of GroupWise 8.0.2(HP2)

We have a troubling security issue with proxy access.

User 1 granted calendar proxy access to users 2 and 3.
User 3 granted calendar proxy access to user 4.
User 3 can see user 1's email.
User 4 can see user 3's email.

When the issue was discovered, user 1 removed all proxy access.
To test, calendar proxy access was granted to a completely different user,
and the behavior was as expected.

Granting calendar access to user 3 again resulted in the same problem.

The fact that user 1 is the director of our facility does not make anyone