In at least one instance, a user who belongs to a group (and is even a group owner) cannot grant read and write permissions to that group's topics to a credential. Symptoms are that the web UI allows the relevant check boxes to be checked, but the changes vanish later, e.g. when reloading the credential management page. This suggests that the permission is not actually being stored in the backing database. The same problems occur hen an admin tries to add the permissions on the user's behalf.