Brain freeze! I have 4 user groups, guest, member, staff and admin. Each member (apart from staff and admin) will be a "guest" before they upgrade their account through the "account upgrades" link. At that point their secondary group is set to Member. The guest group has "view" and "view node" permissions set to "allow" everything else is set to "not set" In node permissions this is where I get confused. I set the permissions for each of the nodes, for the "guest" group most of them are set to "inherit" because how I understand it is that if their secondary group has "better" permissions than their primary group then they inherit the better permissions. Is this correct? Also, some of my nodes are inside categories, what sort of permissions do I apply to the categories? The same as the nodes inside it?