denying 'Read' permission overrides other permissions

[punkyard]

1. add a user to two different groups
2. give group A all permissions on a group sub-folder
3. deny 'Read' permission on this same sub-folder to group B
4. user can't see the sub-folder

Expected behaviour

'deny' should not override 'allow'

Server configuration

Operating system: debian 12

AiO 10.1.1

Nextcloud version: 30.0.4

Group folders version: 18.0.8

Are you using encryption: no

Client configuration

Browser: Safari
Operating system: MacOS

Logs

no log generated

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
Failed to load resource: the server responded with a status of 404 () https://domain.net/custom_apps/contacts/css/contacts-index.css?v=13bea3cd-83

b) The network log
same

should i investigate further for log or else?

Thanks for your concern