Comment 3 for bug 1497322

What's happening is that the number of the group id is changed to text and compared via regex to '^X' where X is the id of the permission group selected from the dropdown. Since ^ means "starts with" selecting any single-digit group id will include the expected group X, but also X0 - X9, X00 - X99 and so on. Since the numbers really mean nothing as far as relations are concerned, it looks completely random.

The ideal fix for this would be to stop comparing the profile field with a regex and instead use 'in permission.grp_descendants(X)'. This way you'd be able to choose a specific group like Resident or a higher level group like Staff, Patron, Vendor, etc.