We recently had a pretty worrying bug happen, we use database user sources and assigned a role to the user. The gateway webpage gave no feedback that it was in process and it was taking some time. So we clicked again and waited, eventually it closed and said success. Afterwards we realised that all the users that previously had that role got the role removed from them.
We managed to replicate it in our development system, please see the below video where you can see the engineer role slowly disappearing from each user. Luckily we had a relatively new back up that we could restore from.
This is the page and the save button that allows you to click multiple times
I'm working on replicating this myself but have been unsuccessful so far. For clarification, the action you took was unassigning the "engineer" role from one of the users and then clicking save changes twice? And did that result in the "engineer" role being removed from all users that previously had the role or just the ones that it gets removed from before the screen recording ends?
There is a fix in 8.3.7 for the multiple button clicks being allowed so that should help mitigate this at least to some degree.
