yeah - we'd like to say that a user in multiple groups has the maximal amount of permissions provided to them from the groups