Hello cjames,
wow, really strange... :-(
What can I say? how are the rights given to this user? to the user directly or to some groups? or a combination of user and group rights?
1) If the rights of this user is done directly on the user permissions, and it still doesn't work, then I'm out of idea... except... does the field has some special function in the application group? (like "segment", "Size", ...?)
2) If the rights of this user is done via groups, then here it is a little bit tricky, you need to look at all your groups and verify which of them is giving the permission to your application group, and then from this subset of groups take the one with the lowest GID (Group ID), and this one will give the permission of the application to the user. Then change this group to the correct permission, and check.
3) If you have a mix between user rights and group rights, then check where is located the permission of this application group, if this is the on the user, then check point 1), if the permission is set in the group, then go to 2).
Another idea that struck me... do you have any security user exits? Maybe, depending on what they do, it might have an influence on the rights that you can give or not...
If after all of that, it still doesn't work... or you cannot find any good explanation, then maybe a PMR would be an idea...
Sincerely yours,
Alessandro