Create policy & role

I have followed the create policy and role lab. created s3restrictedaccess as a policy with access to appconfigprod1 and 2. I can see that in my policy detail. But when i add that permission to dev1 user, I see appconfigprod2 in error and appconfigprod1 shows "objects can be public" message. What could have happened?