Update: further tests reveal that the problem still persists for my test account. I made the problem go away by granting my test account "Administrator" access to the root portal. Could it be that the CuteSoft editor evaluates role membership for parent portal and not child portals? If nothing else, I can see if I can debug this myself somehow.