A blocked host still reaches the server

Policy: host 192.168.1.50 must NOT reach server 10.0.0.5 — but it still connects. ACL 101 is already written correctly on R1 and applied to an interface. Find why it isn't taking effect and block the right traffic without disturbing anything else. Two valid fixes exist.