Rapture gets confused about users being able to log in but having no "UI permission"

While testing LDAP, I found following problem:
1) set up LDAP server, put it 1st in Realm order
2) I forgot to set up user mapping, hence users from LDAP were able to authc, but authz had no (or better, LDAP roles were unknown to NX)
3) logged in as LDAP user: UI told me "I have no permissions to use UI", login screeen returned on every enter, only way to "escape" was reload the UI
4) when reloaded, LDAP user was displayed in upper right corner, but had no UI elements: kinda I was "in", but could not access any of the UI

I'd expect that if user have no UI perms, to be kicked out from UI. Affects Nx3 Rapture UI.