I've got a user assigned to the project manager role that was initially set up in the sample/initial setup and he's also assigned to a new developer role for certain projects. The new role has the global right of link items, but the project manager role did not. The user was working within the project that he has the developer role permissions in, but he was still not able to relate items until I granted the right to the project manager role.

Most of my users have multiple role assignments - some projects they can view data only, and some they can do everything but delete, but in the projects where they can do everything, they can't move items between the subprojects unless I change their assignments to drop the projects where they can only view. I can't find a global "move items" privilege, so is this also doing a subtractive permission check?

I've gone thru the user manual, to find out about specific permissions, and it refers to the admin guide to get more specific info. However, security doesn't show up in the index or anywhere else that I can find, so is this information somewhere else?

Brenda