first of all ... the search function and faq had no answer to this one ...

Question:
Assuming a user is member of more than one group (ex.: Registered User *AND* Webmasters) ...
and I grant permission to Module A in "Webmasters" and block permission to Module A in "Registered Users"

what are the resulting permissions ?
Will "permission vectors" for groups just be OR'ed resulting in precedence of "grant permissions" ?




P.S.: Where do you guys hide the documentation ^^ ?

Multiple groups will result in the highest level of permissions available being granted.

That being said, you may wish to create a limited admin group which grants rights to a specific module's admin section, etc. and remove additional webmasters, as they will doubtless have more access under the default permissions than you may wish to grant.

Don't know where the docs are hiding either...