Security system prioritization order

Role assets are read top down. Row by row. This means that picure below would be interpreted as: Row 1; Process folder is not visible. Row 2; Process folders is visible.

Result: User will see the process folder.

Same thing is valid when assigning roles to a user. The roles are also read top down. Row by row.

Result: user will not see the folder.

Note; If a user is assigned both to a group and has explicit role assignment, the role assignment will overrule the group.

The one exception is; when the "default" context is placed below other contexts (picture below). Then "Default" will override previous context settings. Therefore, it can be smart to place the  ”default” assets at top rows in the role, followed by eventual other contexts. 

Result: user will see the Process folder, even if it is locked.