ACLs, multiple groups and inheritance - Joomla! Forum - community, help and support

hi,

i trying create multi-level category structure , ran problem, or maybe inconvenience way permissions inherited in joomla! not sure understand correctly, hence writing down here discuss.

assumptions
we have @ least 2 groups of users, 1 'registered', others new group, let's call 'power', created. power-users members of registered, i. e. member of 2 groups.

no want structure this:

root (access allowed registered)
|_ public (access allowed registered)
|_ restricted (access allowed power only)

how buid this?

my first attempt looked this:
root (registered:allow, power:inherit)
|_ public (registered: inherit, power:inherit)
|_ restricted (registered: deny, power:allow)

this not work, power-users registered users, deny takes precedence, result: no access.

second idea:
root (registered:allow, power:inherit)
|_ public (registered: inherit, power:inherit)
|_ restricted (registered: not set, power:allow)

not possible, on cannot not set permissions group on category level.

i take power users out of registered, means in consequence i'd have give power-group explicit permissions on acls - lot of work.

i admit, long term windows user, kind of used inheritance feature of acls. looking way break inheritance. set new, not inherited acl on restricted.

not possible, right?

thank you!
henrik