Let's say user Bob has two roles "users" and "powerUsers". How can Bob be able to read/write "/public" AND "/public/power" while Alice with only the role "Users" be able to read only "/public" AND NOT "/public/power" I have tried the following config but Bob cannot read "/public/power : <objectnode classname="org.apache.slide.structure.SubjectNode" uri="/roles/users"> <revision> <property name="group-member-set"><