If not already documented. We've had a couple of reports of folks losing time because they make an assumption that permission operators behave like arithmetic operators rather than set-theoretic operators, which don't have the same conventions of precedence.