Another issue, it is the same like the anonymous browsing app, if the user is in two usergroups. If the primary usergroup has no permission the second usergroup can't overwrite this.
I want to use this app to give paying members an extra bonus, the paying member group is set as the second usergroup and I can't change that.