It is possible for a user to set the same user/group in authorized and unauthorized section.
There should be a message indicating that the user/group cannot be in the 2 sections or the user/group should not be available in the list if it has already been choosen.