When changing locks on a domain, it doesn’t seem to update either the columns in the list or the values used for filtering, so they still show as “OK” despite now having clientDeleteProhibited, clientTransferProhibited and clientUpdateProhibited applied. Presumably there is some caching happening somewhere which needs to be invalidated upon update.