I just saw that the recent updates to dbus/PolicyKit/etc have changed the group of /dev/sr0 back to “cdrom”, as it should be. So those you who worked around the access issues to DVD/CD drives by adding yourself to group “disk” can now remove that. It’s slightly risky being in group “disk” because the hard disks belong to that group and therefore you have raw access to the disk devices.