AFP: one user cannot access folder
While still not understanding the reason this occurred, I was able to make the problem go away by explicitly adding the user to the inherited group in Workgroup Manager, verifying it with dsmemberutil, reconnecting to the AFP share, disconnecting, and then removing the explicit group assignment.  After all that, dsmemberutil still shows that the user is in the group.