Before attacking the question of how to make the group ACLs behave as
desired: have you corrected the ACLs described in your previous message
and confirmed that your correct versions operate as you desired?
Once you've done that, you should then decide whether those corrections
also apply to the group ACL case...but not until you're *sure* the simpler
ACLs are behaving as desired.