is it likely that changes made to AA applications/policies might take some minutes to become effective?
I recall, during one "upgrade" process that records from one portal were being shipped, in a long queue, from one backend implementation to another (to some ACS, as I recall). And, its likely ACS replacement is now getting a tryout (behind the scenes).
I just notice that permissions suddenly take effect, but at some time well after the config change; whereas up till recently, any change was essentially immediate in effect.
would help doing some debugging of stuff that worked, and that suddenly doesn't...or works intermittently.