User gets this message in a list of records whenever there is a record user doesn't have rights to view. I.e. there is an ACL restricting access to a record or there in NO ACL granting the access. Let's ignore security mode setting here.
It's a default system beharior.
Would you like to get rid of it? System to count with records user has access to?
Replicate row level read access ACLs to query business rules. Naturally, every query will get controlled.