Ok. First off. There won't be a deny from. This was going to make a much more complex system with heavy calculations and multiple SQL calls that would not have been nice on server resources. So, at this time there will only be an Allow Read, and an Allow Read and Write.

Secondly to answer your question. Yes, you could just assign that one doctor to The Patients Group and the Doctors Group and he would be able to access both boards.
---
Scream
http://www.wcsoft.net