I have a site that has a subsite. Users need permissions to the subsite but cannot be allowed to see the main site at all (they should get a access denied).
Generally how I do it is, I break permissions inheritance for the subsite, then create a new group for that subsite with the required permissions. Then for the main site, I place the users in whatever group I need. The problem is, as far as I know, there is no way to specify a group with "no access".
Any ideas how to do that?