When user levels or credentials are changed, say to 'read' instead of 'read/write', this does not get enforced on existing connections. It would be better if all connections are cleared of old authentication information on the server immediately after these changes.