[AndrewD]

I've just been debugging a problem for a site which has set up multiple usergroups and given people membership of these as their primary and secondary usergroups. Depending on how this is set up, there can be unexpected consequences within LDM.

LDM
- gives users the most liberal permission based on *any* of their usergroups.
- gives users download allowances based on their *primary* usergroup.

Suppose usergroup 'FullyRegistered' has an allowance of 10 files a day and usergroup 'Registered' an allowance of 5 files a day.
- Someone who is a member of both usergroups with primary member of Registered will be allowed 5 files/day
- Someone who is a member of both with primary member of FullyRegistered will be allowed 10 files/day

However, suppose 'FullyRegistered' is also given *can_bypass_hit_recording* permission.
- All users who have FullyRegistered as their primary or secondary usergroup will gain this permission
- Consequently, their accesses will not be recorded
- Consequently, they will never exceed their allowances.

Questions:
- Is this what you would expect to happen?
- Should users be given allowances based on their primary group or the most liberal of their primary and secondary groups?