Field Collection Leaks Server Side Data

Dear all,

I've had multiple reports of the following problem. I have not been able to reproduce the problem, but maybe we can in a collaborative effort: Field collection seems to preload server saved data the anonymous user shouldn't have access to.

Setup

• This is a field collection that holds multiple fields: Four of type text, one of type email and one of type Country
• It is embedded in a content type
• I am using custom field permissions: For the field Anonymous can only create its own value, not edit own value, not edit anyone's value, view own value for the field, not view anyone's value
• Cardinality is unlimited
• Blank Items are hidden

Description

• Anonymous starts to create a note
• Anonymous fills one field of the field collection
• Anonymous adds another field of this type
• This field comes preloaded with content from the server.

Problem

• The preloaded content shouldn't appear
• The loaded content was definitely inserted from a physically different location, no browser auto-completion or caching possible

Possible Ideas

Maybe this happens, because of this? - I hope to find more ideas here in the issue queue

• Anonymous can create a node
• Using Field Access permissions
• Server side caching (using standard Drupal only)

Any ideas? Thanks.