As I posted above, the permissions are cumulative.
So for example, if you don't want normal Registered Users to be able to edit their posts, set the permission to Default.
Then for the Donator group set it to Allow and that will give them the permission.