Users without Drupal permission to manage civicrm groups can disable or enable newly disabled civicrm groups

CiviCRM 1.5
Drupal 4.7

I created a user role that did not have permission to manage civicrm groups.

I then disabled a civicrm group.

I logged in as the user without group management permission.

I was able to either 'disable' or 'enable' that newly disabled group. This did nothing in reality - either choice led to the management options being removed.

Not sure if this is a drupal issue or a civicrm issue.