I have a group ‘administrator’ and a group ‘user’. If I add a new user I’m able to apply one or more groups. If I add both groups than logging on as the new user fails due to a ‘not authorized’ error. If I remove the ‘user’ usergroup so that the user only is administrator he can login. This is a bug.
If a user has been applied more than one usergroup than the accessrights should apply as the sum of access. This is currently not the case.