I have a following page structure with comments who should have an access there:
- About For everyone
- Products For everyone
- Contact For everyone
- Intranet Only for Customers and Staff
- For Customers Only for Customers and Staff
- For Staff Only for Staff
Apparently I have two groups: Customers and Staff.
If I protect the Intranet branch and allow both Customers and Staff to see its contents, it seems that there is no possibility to deny group Customers to see pages under Intranet > For Staff. Or is there?
I would like to see something like ability to override the inherited groups somewhere in the subtree. We could allow both Customers and Staff to see the Intranet branch (and its descendants, by default) but then redefine only Staff to see "For Staff" branch (and further its descendants). If somebody adds more content under Intranet, it would still be protected by default.