"Cancel" on Edit Permissions page does not clear added users/groups

This might be by design, but when a user adds individuals or groups to the Edit Space Permissions page, they are immediately granted View privileges. If a user hits the Cancel button on the page, it only resets the checkboxes. It does not revert to the original permissions state from before the operation began.

While it is easy to remove these individuals and groups after the fact, it creates a dangerous expectation when administrators are learning the interface, as they might hit the cancel button and immediately navigate away from the page before noticing that the permission changes were added.

Normally, I could even consider this part of the learning curve for Confluence administrators, but with my end-users starting to look into Personal Spaces, it is starting to become a security risk.

Put some kind of warning or "Are you sure?" prompt when they try to navigate away after a Cancel?