We are running DNN 4.9.4 with multiple Child Portals.  We have an issue with users being logged out when they navigate within their child portal. (user logs in, then they click on any link/button and are logged out).  In order to fix the logout issue, we have added users to Portal 0 in the "UserPortals" table.  This has fixed the logout problem, but now users with the "Administrator" role on ANY child portal are also being granted "Administrator" privileges on Portal 0, even though they do not have the "Administrator" role assigned for Portal 0.  It appears as if DNN is only checking the name of the role when enforcing security, instead of verifying the PortalID as well.