Recently an existing user had their account updated with a new email address.
THE PROBLEM
When trying to add this user to a restricted page, it picks up the user - with the new email address, and you are able to add and apply the changes.
If you go back to the page restrictions it then shows the user as an "unknown user" with their old email address.
Note: The old email address has been completely deleted from the system.