Squidguard Group Layering

[MadHarlekin]

Hey everyone,

currently I am working on squidguard and the Group ACLs to implement it with LDAP and I was wondering about the following things:

The plan is to assign a basic rulesets via Active Directory and increase it on demand with a complementary groups e.g youtube or social media. Is this technically possible? I found some statements which say squidguard can only read one group, is this true?

The Group ACLs and their hierarchy is top to bottom, correct? Yet I found conflicting behaviour between multiple Group ACLs where the lower groups don't get applied at all. Even with Whitelisting entries in one group, a second group overrules it, no matter what position in the hierarchy.

Thanks for the Help

BR

MHK