Yes I agree - but they did it on Prod and that works. I promoted it to test and that works, I promoted it to DEV and it doesn't for IDT. They will say they delivered a working platform.
thanks for your thought!! I might end up removing all security from Dev and reapplying it