Hi Dynamicweb,
If a user switches from one user group to another in a user import, then the user can still see content on the website that he/she is not allowed to see. The rights are only updated when the user is saved or the solution is restarted. It appears that the UnifiedPermission cache is not cleared after import (in UserProvider).
Best regards
Niels Foldager
UserProvider:
User.Save():