Answer
Refresh the Security Cache — this resolves this exact symptom, where the access has actually been granted correctly but the currently-active session or server-side cache simply hadn't picked up the recent permission change yet.
Refresh the Security Cache — this resolves this exact symptom, where the access has actually been granted correctly but the currently-active session or server-side cache simply hadn't picked up the recent permission change yet.