Currently a logged in user only has right explicitly granted him/her or a group to which they belong. Logged in users should also have all the rights granted to anonymous users. For example, if anonymous users have view acccess to a space then all logged in users should also have view access. In other words, logged in users access rights should be OR'ed with anonymous users' rights.