I may be wrong, but aren't multiple FILTER statements logically AND'd together, so for this to work both the user permissions and and the users name must match, for that result to be included?

What will happen in the case where we have a user 'bob' who is not an 'manager' but the policy states that 'bob' and 'manager's can access the given object?

Or a policy that say's 'anne' and 'manager's can access but 'fred' who is a 'manager' does a search will he still get the results?