Right now, if you grant specific users application-specific permissions, then deactivate those users, they still show up in the specific permissions list. They should either lose those priviledges when they become inactive, or inactive users should not show in the list.

J.Ja