Error on relation tab when restricted tree visibility

To reproduce:

• Log in as Administrator
• Create workspace
• Create user with no group
• Assign "Manage Everything" to user on workspace
• Log in as user
• Create doc in workspace
• Go to relation tab on doc
• -> Permission denied

  org.nuxeo.ecm.core.api.DocumentSecurityException: Privilege 'Read' is not granted to 'bob'
  	at org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSession.java:320)
  	at org.nuxeo.ecm.core.api.AbstractSession.getDataModel(AbstractSession.java:2648)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl$2.run(DocumentModelImpl.java:553)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl$2.run(DocumentModelImpl.java:550)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl$RunWithCoreSession.execute(DocumentModelImpl.java:448)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl.loadDataModel(DocumentModelImpl.java:550)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl.getDataModel(DocumentModelImpl.java:564)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl.getPart(DocumentModelImpl.java:1423)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl.getProperty(DocumentModelImpl.java:1489)
  	at org.nuxeo.ecm.core.api.impl.DocumentModelImpl.setPropertyValue(DocumentModelImpl.java:1509)
  	at org.nuxeo.ecm.webapp.tree.TreeActionsBean.getTreeRoots(TreeActionsBean.java:152)
  	at org.nuxeo.ecm.webapp.tree.TreeActionsBean.getTreeRoots(TreeActionsBean.java:117)
  	at org.nuxeo.ecm.webapp.tree.ReducedTreeActionsBean.getRootNode(ReducedTreeActionsBean.java:59)
          ...
  	at org.richfaces.component.html.HtmlRecursiveTreeNodesAdaptor.getRoots(HtmlRecursiveTreeNodesAdaptor.java:214)
          ...
  	at org.nuxeo.ecm.webapp.tree.ReducedTreeActionsBean_$$_javassist_86.getRootNode(ReducedTreeActionsBean_$$_javassist_86.java)