The Project/User/Security Level Cache can be over eager and grant incorrect Security Levels to users.

The IssueSecurityLevelManager finds the list of Security Levels available to a user for a given Project or Issue.
The problem is that we cache the results against the project even if it was a query for an issue, and also we use the List cached against the project even if it is an issue query.

This leads to incorrect results when the Issue Level Security scheme includes permissions like "reporter" or "assignee".

Please see TestPromptUserForSecurityLevelOnMove.testMoveProject_Issue_SecurityLevelNotAvailableToUser() for a func test that was failing because of this bug.
Note, however, that this test was not written specifically or this particular issue, so it may randomly pass.

Bug exists in IssueLevelSecurities.getUsersSecurityLevels()