After making any change to security the user should press the "Refresh Security" button to commit any changes. This button can also be pressed when new objects are created that users do not have access too by default.