Granular group-based permissions for anonymous and logged in users

Hmm you’re right. There are a couple more things I need to fix when the upcoming change is disabled for this disallowed_group problem to go away:

  1. anonymous_users and logged_in_users aren’t in the group picker at all. I think it’s safe to allow these here now, then it won’t matter if you’ve added everyone to disallowed_groups if the upcoming change is turned off.
  2. Fix Guardian::AnonymousUser#in_any_groups? to respect anonymous_users with the upcoming change turned off.
  3. Add the same read time aliasing of 0 (everyone)5 (logged_in_users) for theme settings, which we do for site settings.

I think I might also mark everyone with (legacy) in the group selector(s) while the upcoming change is still optional, and disabled.

Will prioritise these ones, and add them to my overall plan I’m working on.