The current permissions handling is a bit buggy – the happy path works but otherwise there’s some errant behaviour. We’ve got a permissions handling upgrade lined up for quite some time now; after we finalize a current major runtime upgrade it’s one of the top items on the backlog.
That said, I’ll see if this could be improved/fixed even before that, thanks for the report!