Allow rights should have priority over deny rights

I didnt find this special feature in documentation. Maybe it is normal functionality, but i thing it is not right concept.

1. user "franta" is in group "one" and in group "two"
   "One" can view all documents and "two" can view all documents except "doc1". Franta cannot view document doc1. I think he could view this document.
   The solution is not so hard: I can replace the rights only for the page doc1.
2. user "franta" is in group "one" and in group "two"
   All groups can edit all pages. I have page "doc2". This page would edit only group "one". On the page level i denied edit right for group "two". Franta cannot edit this page because he is in group two and the denied access has bigger priority.
   Solution: I can create special group with special rights, but it is unnecessarily complicated and not transparent.

Better solution is that allowed rights has bigger priority than denied rights. Of course the hierarchy page-space-global will not change.

I have to solve this problem often and i think it is easier to manage rights by my way. Allow right would have priority.