Affected Version: 2.7
this is actually two bugs, closely related:
at first, my admin group had no push rights to refs/meta/*. as a result, i got the usual "You don't have permissions to modify the access rights for the following refs:" at the bottom, listing several refs.
thing is, the permission changes actually went in despite this - after refreshing the page, everything looks as expected. direct pushes to refs/meta/config were also accepted without any complaint.
now, i gave the group push rights to refs/meta/*, which reduced the number of refs the ui is complaining about. strangely enough, it still complains about lacking permissions to refs/*. that is correct as such, but doesn't appear to make sense - why would the ACL config need push rights outside refs/meta?
issue 1662 seems closely related.