Maybe I should hit acs_objects context_id as well as the parent_id in the CR.
I would like to know which type's doing this, though, code shouldn't be setting context_id directly to the security context root. NULL is the default that says to fall back to the security context root. Among other things doing this makes objects not depend on a particular value for security context root ...
