I have classified my applications into modules and uses the security group / application feature to manage its access. However, when i assign these groups to a user, the SC 6 security feature only check the first group in the list and ignored the rest.
One possible reason is when i checked the database of the security tables, the SC 6 security modules create all the application list into each group, and if the application is not selected, its fields are assigned to NULL.
I think the logic should be only those application selected should be written into the group tables. and there should be a master view that combines all the selected application in each group by userid. This way, we can check if the users has access which application assigned to him via multiple groups.