Info 'Changes applied' is a false statement when dissociation between user and role fails without explanation

[grahamperrin]

I'll attach a sequence of screen shots demonstrating the issue.

Actions

Working as site manager A

1. associate roles with a group.
2. add user B to that group.

Working as site manager C

3. at /prefs_users_overview find user B
4. de-select (remove ticks from check boxes) the roles that should not apply to the user
5. click 'Apply Changes'
6. observe and be reassured by the statement of confirmation Info | Changes applied.

Bug

None of the changes were applied.

Environment

• Plone 3.1.7
• ZEO cluster
• root install

See also

Ticket:8710, Info 'Changes saved' is a false statement when a group addition fails without explanation.

Suggestions

1. do not assume that one site manager's knowledge of group memberships is equal to another manager's knowledge
2. do not allow de-selection of roles that are inherited (through membership of a group)
3. do use the green style of unalterable tick/check that TTP (through the Plone) commonly iconises inheritance.

[grahamperrin]

Hint: focusing on the false statements in both tickets, what criteria must be satisfied before the statements are made? (Are we being not rigourous enough with criteria?)

[kleist]

As for suggestion 2 "do not allow de-selection of roles that are inherited (through membership of a group)", this seems to have a ticket of its own: #6090