Forum OpenACS Q&A: Re: Packages mounted on subsites inherit permissions from Main Site

This certainly sounds like a bug, and also a good find.