When permissions are granted or revoked to groups with upper case letter in them, the permissions are not effective until a restart

When permissions are granted or revoked to a group, the permission cache is updated. Usually the group names are lowercased, but for these dynamic updates, the lowercasing isn't happening.

For example, the permissions cache is updated for group 'Administrators', but the permission checks are done for group 'administrators'. As a result, the permission checks do not 'see' the updated permissions.