assignment of User Permissions works well. But if I don't assign user rights at all but place users into groups and assign rights only there, users will always get full rights, regardless of the permissions set to the group.
I checked this with the demo application. Same problem. Must be a bug in the security system.
Can you confirm the bug? Is there a solution already known? I read something similar in the vcl thread "Problem with GroupPermissions". Although the thread is more than 2 years old the problem seems to be the same!
When will there be an new release? Are there new features to be expected?
We are scheduling an update for the first half of May.