diff --git a/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/assignment_workflow/scripts/Assignment_updateUserSecurityGroup.xml b/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/assignment_workflow/scripts/Assignment_updateUserSecurityGroup.xml
index b22903bd9b804d07fa2f45d0f774190e59cbc5a9..0cac3b826f58b7b4a096998fd16adc6248215abc 100644
--- a/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/assignment_workflow/scripts/Assignment_updateUserSecurityGroup.xml
+++ b/bt5/erp5_base/WorkflowTemplateItem/portal_workflow/assignment_workflow/scripts/Assignment_updateUserSecurityGroup.xml
@@ -68,8 +68,13 @@
         </item>
         <item>
             <key> <string>_body</string> </key>
-            <value> <string># Using PAS removes the need of this script\n
-if state_change.getPortal().acl_users.meta_type == \'Pluggable Auth Service\':\n
+            <value> <string>portal = state_change.getPortal()\n
+\n
+# invalidate the cache for security\n
+portal.portal_caches.clearCache(cache_factory_list=(\'erp5_content_short\',))\n
+\n
+# Using PAS removes the need of anything else in this script\n
+if portal.acl_users.meta_type == \'Pluggable Auth Service\':\n
   return\n
 \n
 # Get the assignment object and its parent\n
@@ -137,6 +142,7 @@ if person_security_script is not None:\n
                           <tuple>
                             <string>state_change</string>
                             <string>_getattr_</string>
+                            <string>portal</string>
                             <string>_getitem_</string>
                             <string>assignment_object</string>
                             <string>person_object</string>
diff --git a/bt5/erp5_base/bt/revision b/bt5/erp5_base/bt/revision
index 6547e41559f1adeb64e16d6027efdac6619b1bd2..89a16a7ddc3b772d81302efaab91722efa3e1429 100644
--- a/bt5/erp5_base/bt/revision
+++ b/bt5/erp5_base/bt/revision
@@ -1 +1 @@
-171
\ No newline at end of file
+172
\ No newline at end of file