This appears to be by design. You will notice that on the menu, permissions function properly. On the main portal, they do not. Here is what I have found: portal.php, line 81 /** * Check for permissions before loading anything * the default group of a user always defines his/her permission (KISS) */...