Users can see published bookmarks and other users personal bookmarks and sheets

[Nahla_Mabrouk]

I created a security rule to enable users to publish bookmarks

((resource.objectType="bookmark") and (user.name="x" or user.name="y" ))

users now can publish bookmarks but they can see other users personal bookmarks and personal sheets

So what is missing in this security rule.