Also related to this...
If you disable an add-on that has custom permissions and change some other permission after it's disabled, when you re-enable the add-on the permissions need to be set for each user group again. In other words, permissions are not rebuilt after enabling an add-on.