In the Web Portal, data is displayed for Employees although a visibility condition on a column should prevent the display.
This is by design. For performance reasons, visibility scripts work only with interactively loaded objects. For the same reason, the alternative possibility to intercept this via an onloaded script does not work.
Such requirements must be implemented via permissions.