@arunpatidar , thanks! So this means that even though some users have permissions at the root level, if one of the child pages has CUGs defined, the CUG permissions will alone apply? Do I get this right?
Also, does this work for an unpublished page on author?