I can't find anything in the docs, but we are seeing what appears to be permission caching on the server. Here's the scenario:
Is there a cache timeout on the permissions in the Access Point?
Found the answer. Amazing what the "More Like This" box to the right shows.
Retrieving data ...