There seems to be quite a few problems with the rights in the security dialog component. For example if you un-check TuilSecurityDlg.CanEditUser the edit user button is greyed out but you can still double click a user in the tree view and change it's properties. There are similar problems with the other flags.
We want to allow end users of our application to add new users and select which group they belong to but not allow them to change the group permissions that have been set. Currently this is not possible.