group_control_map.canconfirm and friends

[Nick Barnes]

At 2007-05-14 04:06:06+0000, Max Kanat-Alexander writes:
> On Mon, 14 May 2007 01:22:48 +0100 Nick Barnes <Nick.Barnes at pobox.com>
> wrote:
> > In particular, I'm confused about the difference between the 'canedit'
> > and 'editbugs' columns of group_control_map.
> 
>       There is a global permission called "editbugs." If somebody has
> this permission, they CANNOT edit a "canedit" product unless they are
> in that group.

So if a bug is in a product which has 'canedit' for groups G1 and G2,
and 'editbugs' for groups G3 and G4, then in order to edit the bug, a
user must be in:

     at least one of {editbugs, G3, G4}
              AND 
     at least one of {G1, G2}.

Is that right?

Nick B