The cache that holds all the available for a user in a certain project is not refreshed when a user moves between groups.

For example if you a have a security level for the group jira-developers and you then add a user to jira-developers the user does not have the security level available to them in the create/edit screens.