User -> John Smith (Added to the group Sales Team)
Group -> Sales Team (In the address book)
Database ACL -> (Person Group) Sales Team (Assigened the Role = Sales)
So when Jonh Smith logs in to the database - he is seen as a user in the Group Sales Team, so he is assigned the role of Sales - I check this with a @UserRole Field
I removed John Smith From the group Sales Team - The Address book has been replicated and the names.nsf has been refreshed and indexs rebuilt.
When John Smith logs in now, he is still in the Sales role even though his name is not to be found in any group and the ACL everybody has no access