Ok, let me clarify this. It isn't necessarily the most restrictive. It would work like this:

User A belongs to the following groups: Guests and Special

Forum 1 is set to allow read: Guests
Forum 1 is set to allow write (read and write): Special

In this case, since he is a member of Special he will have full privileges on this forum, even though the Guests group only has read permission.
---------

A different example would work like this:

User B belongs to the following groups: Guests and Badusers

Forum 2 is set to disallow read: Badusers
Forum 2 is set to disallow write (read and write): Guests

In this case, even though Guests group isn't disallowed from reading the forum, User B does belong to the Badusers group so he can neither read or write.
---------

Hope this makes sense. When you are dealing with multiple groups you may have differing permissions for a user on a certain forum, so this needs to be handled properly.

Now, it doesn't have to be this way. We could go with each user can be set to one group, and then we wouldn't have to worry about this. This would make administration easier and it would be *alot* easier to code, but wouldn't provide as much flexibility.

I am open to doing it either way, but that's why I posted this here for discussion is the people who are going to be administrating the forums should be able to decide how this will work.
---
Scream
http://www.wcsoft.net