Need help locating TM1 Documentation

[donap]

Hi All ! 
I know way back when, I had read a document somewhere that explained the hierarchy of Security (Cube, Dimension, Element)  --
such as -- If a User Group shows as WRITE access to an element, but the Dimension is READ, and the CUBE is READ -- the WRITE at the Element level is overriden to READ.

Our application owner is nervous when they see a report over the security cube and occassionally see a WRITE pop up.
I can explain it, but they require documentation from an outside source.

All I can find on the web are very complicated explanations with one user being assigned multiple user groups, or it is too technical for what I need.
If anyone can point be to a link, it would be greatly appreciated !
Thanks