Thank you David for this quick write-up.. this only happens when the user originally did not have access to the TEST company prior to the refresh/restore.. If the user had already access, then he is already part of the security access table. But it happens once in a while and there is no way this can be fixed from GP, except if you have some 3rd-party add-ons.