Several things can trigger a change in user permissions: change in role, change of permissions available to role, but most frequently, enabling/disabling of phase.
This can lead to users not having access to features, or having access to features they shouldn't have, until they log out.
Ideally the system should detect when permissions have changed and reload the user permissions.
Another way to achieve this might be to force logout all users on a phase change so they have to log in, and will have the new permissions applied.