Found the problem: there was a group that some people had in phpgw_acl that wasn't in phpgw_accounts. How this happened, I don't know. The User drop down had this number associated with the logged in user in the drop down. Why is a bad group number being associated with the user as their id? Once I deleted the phpgw_acl records with this bad group, the problem went away.