New category permission - "cannot see"/"exclude"

[Stephen]

@jimkleiber

Makes me wonder how conflicting permissions work right now: if a user belongs to group A and group B and group A can create topics in that category but group B cannot create topics, can the user create a topic in that category? In other words, which takes precedence?

Permissions are effectively cumulative, there’s no such thing as a conflict in that sense. The highest inherited permission always wins. I can be added to one group which lets me see a category, and also another which lets me contribute.

@jimkleiber

maybe it can be relatively simple: just allow us to add a group to the security settings of a category and let us uncheck the See box.

Why would you need to exclude a group unless you’ve also explicitly given access through another membership?