// users not in X AND not in Y will be denied access if (!is_member_of($bbuserinfo, X) AND !is_member_of($bbuserinfo, Y)) { print_no_permission(); }