assertFalseIsMember(newGroup.getDeclaredMembers(), auth);
assertFalseMemberOfContainsGroup(auth.declaredMemberOf(), newGroup);
// testuser must however be member of 'newGroup' (indirect).
assertTrueIsMember(newGroup.getMembers(), auth);
assertTrueMemberOfContainsGroup(auth.memberOf(), newGroup);
// testuser cannot be removed from 'newGroup'
assertFalse(newGroup.removeMember(auth));
superuser.save();
} finally {