Permissions with Secondary Groups

[John Horton]

Permissions with Secondary Groups

I want a primary group with limited permissions such as max daily posts.

Some of my users also belong it various secondary groups.

Playing with this it looks like any restrictions for a primary group would be overwritten if a secondary group is less restrictive.

In other words, I have a general primary group that is limited to 3 posts a day. I also have a subject matter specific secondary group that is not restricted. When I add the secondary group to a user the restrictions of the primary group are overruled.  

Do I understand this correctly and is there an easy solution? 

[Richard Arch]

I view them as merged, the restriction takes the best option.  In your example its 3 or infinity and infinity is what gets applied in that restriction.

[Jim M]

18 minutes ago, Richard Arch said:

I view them as merged, the restriction takes the best option.  In your example its 3 or infinity and infinity is what gets applied in that restriction.

This is a great way to view it. 

[Marc Stridgen]

Its worth noting that permissions are additive as apposed to subtractive. So when you say restrictions there, this is not actually correct. The default position is that a user has no permissions for anything. Groups add permissions. 

So for example, if in their group you have "maximum conversations a day" set to 5, dont look at it as restricting to 5. Look at it as they didnt have the permission to send any, so you are giving them 5. If you then add another group that has 10, you are then giving them permission to use 10. etc