This is happening on Jira version 4.3.3. We have a project where users assigned to a particular role are not supposed to be able to resolve issues any more, so we updated the project permissions to remove that role from the "Resolve Issues" setting. However, they're still able to resolve issues. We've tried restarting Jira, but that had no effect.
The users in question only have membership in two groups; one which is assigned to the role that no longer is able to resolve issues in this project, and the generic "jira-users" group that is not assigned any roles whatsoever in the project. The really odd thing about this is that we have a test instance of Jira that was cloned from the projection instance mid 2011 where the configuration works fine.
What else could be causing this to happen?