Re: Priority of Privileges

jalal wrote:
> On 18/04/07, [email protected] <[email protected]> wrote:
>>
>> You can for instance insert a subgroup.
>> If DenyEditMenu is assigned to a grandfather while ViewEditMenu is
>> assigned to a father of the roles you are interested in, then the View
>> will satisfy your security checks and the Deny will not come into play.
> 
> 
> That's what I expected but it doesn't quite work that way.
> 
> I've moved Editors into Members, so I have:
> Role: Fred, member of: Editors,Members
> Role: Editors, member of: Members

In this situation Members is a parent of Fred, as well as a grandparent. 
So no, that won't work.

Mote you can also assign an editor privilege directly to Fred. That will 
also override the DENY.