Created attachment 12271 [details]
Currently, objects in the write list always override the same objects in the read list.
This includes cases where you have an individual user account in the read list, and a group he belongs to in the write list. This seems unintuitive, as most of us are used to user account settings taking precedence over group account settings.
The attached patch keeps track of the object type, and gives preference to user account objects if they exist.