Right now, we ensure that users don't have items in sets they lack permissions for by removing such items every time a set gets stored. If a user puts something in a set _before_ they lose permission on that item, the item will stay on the set until they modify the set or the set is cleared by an action.
The simple fix is to run the set cleaner before loading a set with RhnSetDecl.get; but that requires running 2 queries for every set load (the cleaner and the actual load)
Move to Bugzilla Bug 218517: RHN 510 Hosted Triage Tracker.
This bug has been closed due to inactivity. Please open a new bug with specific details if this problem is still occurring or if an enhancement is needed.