Thanks Dave for looking into this. Great to know that it actually seems to be a bug or outdated design docs.
Russell, what we (meaning you, Matthew and myself) can do is play around with it when we change the constraint from persons to parties.
For our stuff it will work 100%, but we are not relying on permissions, so maybe you can test that one and between the three of us we figure out how to get it to work.
