What I think Nat is doing is going to the edit acl page and adding allow rules for group.featureAdmin. What I'm saying is that there is no such group, or at least I don't know where it is defined.
If I add a new user to a group such as group.KarlStaff and add an allow rule for that user using the same screen, the rule works, so there seems to be something wrong with the group, not the acl page.
What I think Nat is doing is going to the edit acl page and adding allow rules for group.featureAdmin. What I'm saying is that there is no such group, or at least I don't know where it is defined.
If I add a new user to a group such as group.KarlStaff and add an allow rule for that user using the same screen, the rule works, so there seems to be something wrong with the group, not the acl page.