Thanks for letting me know. :)

Does the hack only work for primary usergroups?

Yes.

Next question: how can you make it work for secondary groups? I have a promotion set where once a user gets to a certain amount of posts, they get access to chat. I can't have them changing their primary usergroup as that will mess up other hacks. Any ideas?

In theory it would be possible to make it take note of secondary groups - however it does pose a problem - if one group is not allowed access, and another is, and another is a mod group, what takes priority. Normally a non allowed group would take priority over all others, but you are asking for the opposite (mod/admin would always take priority over user).

Well, I've hacked the code so it takes care of secondary groups. I created a new role (ROLE_BANNED) so if a mod/admin/user has n secondary groups of which any are classed as banned, then access is denied. Access rights are granted in the following precedence: ROLE_BANNED, ROLE_ADMIN, ROLE_USER, ROLE_NOBODY

Its working fine atm.

Nice. :)

Would you mind sharing that mod? Sounds like something I need...

Cheers
Bruce

Its got some of Paul's code in there (userinrole function), so if paul doesn't mind me posting the changes here ...

Fine by me. :)