OK, found the problem ๐
You have REPO (repositories) set to “Show to managers”. Like all privacy settings, the restriction is prioritised from the safest down. So if a source includes a repository, which is restricted to managers, then the whole source becomes restricted to managers.
That’s why he can see some but not all sources.