User belonging to two groups with different permissions / rights

Help / Discuss
#1

Due to our current LDAP situation and configuration (see this thread), I may end up with a user belonging to two XWiki groups.
Those have different rights: actually, one is a custom group with only view rights, the other is the default XWikiAdminGroup, having all the rights - these rights are for the whole wiki.

What’s the common set of rights that user will have? The union of the two, meaning the more permissive XWikiAdminGroup wiill prevail, or the intersection of the two, so the more restrictive grup will set the final rights?

I checkd Access Rights but didn’t find an answer.

#2

I think if the user has admin rights by membership of any of these groups, then this will supersede everything else by the “Admin can do everything” rule (not sure if it is a formal rule). In general the union of all permissions will be used.

#3

Yes, I just got confirmation by the user that falls in this case.