If it's not a big deal to do, yes, that would be great. Most of our membergroups are non-primary, very few are primaries, only ones with greater access to the boards. It's complicated...

LOL
If you could set it up so it checked in both primary and secondary and allow/deny based on that it would be great. Would that, however, work with the way I have things set up?
For instance:
Bob
-supporter group
-official group
Steve
-supporter group
Item
-only allow official group, deny all others
If I set it to deny supporter group, but allow official group, would Bob still have access even if he is a member of both?