From what I have seen, OOB whenever a collection is created it creates rep:policy with deny all. So users should not be able to see a collection created by another user unless its shared. You can check if there is any custom rep:policy added under /content/dam/collections with rep:glob /*, if so yo...