If your question about the security being valid means that there is a correct security configuration defined, then yes, the security is valid. If that is not what you mean, please explain.
I am inclined to lean towards libresource not moving the project correctly. One issue is that my project name was someproject and I renamed it to someProject (capital letter - camel humps). I don't know if this would be an issue, but on other projects, it is also an issue even though the naming was changed to something entirely different.
If I grant security on each level to the individual user, I can get things to work, but I can't get things to work with granting permissions to a group within a security group.
Any help will be appreciated.