When a Request type is restricted to a specific Security level that only has the Reporter and Current assignee added to it, the statuses are not filtered out from the Request list view page:

Expected behaviour:
When a Request type is restricted, the Workflow statuses with the corresponding Request types should also be restricted to the customers.