INITIAL STATE:

Users are logged using LDAP server (Active Directory Plugin).

Permissions are given using Role-based strategy.

Global roles and item roles have been created.

A certain user is assigned a global role and certain item roles.

STEPS TO REPRODUCE:

1. Go to Jenkins administration > Manage and Assign Roles > Assign Roles.
2. Change item roles for a specific user (check the box for a new item rol or uncheck).
3. At the bottom of the page, click on Apply and Save.
4. Log out and log in with that specific user you changed his roles.
5. The user has the old permissions.
6. Restart Jenkins.
7. Log in again with that specific user.
8. The user has the new permissions.