I don't really understand all the details of primary vs secondary user groups, it could be that if a permission from a primary group overrides a secondary group that doesn't have permission, then to make this work you'd have to have the promotion change the primary group. That's not a big deal except that you now have two user groups to alter if you want to change something.
|