User Permissions are Not Reflected Properly - Version 13

This is the Role section of the user:

This is the Modules Access of the same user:

Then this what appears to that user when logged in under Home:

Under HR, her has this:

Why he cannot just see the Leave Request and other requests? Why he can access the company record or the Leave Type records? He can see Leave Types applicable for other geographies.

He got access to Employee Transfer while he has no access to it!

How to setup a proper employee access where he can see only what is related and authorized to him?

Please check under Roles Permission Manager and see what permissions Employee has under Employee Transfer doctype