Scream,

I'm not sure I understand what you mean by applying the most "restrictive" permission.
What if there are mutually exclusive groups A and B that give access to private
sets of forums fA, and fB. How would you define the most "restrictive" permission?
If I enrolled a user in groups A and B would he/she have access to both sets of
forums?

EdR