Description
Steps to reproduce:
- Create a user "username" (but continue executing the following actions as Admin).
- Create a group "Secret" that contains "username".
- Create a group "Secret Parent" that contains "Secret".
- Create a subwiki "subwiki" that allows global and local users that any user can join with the standard flavor.
- Create a page "Secret" in the subwiki.
- Add "Secret Parent" to the local admin group in the subwiki.
- Restrict view right of "Secret" to the local admin group in the subwiki.
- As "username", access "Secret".
- As admin, remove "Secret Parent" from the local admin group in the subwiki.
- As "username", access "Secret" again (reload).
- As "username", edit "Secret" and change its content. Reload the page.
Expected results:
In step 8, access is granted, in step 10, access is denied so step 11 isn't possible.
Actual results:
In step 8, access is granted, in step 10, access is still granted, in step 11 after the reload, access is denied (but the edit has been executed).