in 0.9.1 it was possible for admin users to enter a comma separated list of issue URIs into the "issues" field of a volume object on the manageVolumesIssues.action page.
when a volume is created, the "issues" field is empty, and there is no statement in mulgara with dcterms:issueList for the volumen.
once "issues" is populated, a triple with the volume id, dcterms:issueList, and an empty node is inserted.
if, subsequently, and admin user tries to remove all issues from the volume by deleting the contents of the "issues" field, ambra throws a site error, and topaz inserts garbage into mulgara for the issue list.
specifically, the rmi URL of the mulgara server is inserted, as a literal, into the issue list.
once this happens, the volume is damaged and cannot be updated or deleted.
while this particular failure is no longer reproduceable in 0.9.2, due to changes in the volume management UI, topaz needs to do a better job of escaping user input to avoid this bug recurring in the future.