Multiple UDO components assigned to user

We have a few scenarios where we have a UDO component assigned to a role, and another UDO component assigned to another role, and one user has both of these roles.

We have found that the role with the higher precedence will be the UDO component being used, and ignores the other role's UDO component completely.

Are there best practices on how to design UDO security? Is this a known issue? Is it by design?

Any insight would be appreciated.

Thanks,
Karen

----

JDE 9.2 TR 9.2.4.2

WebLogic 12.2.1.3.0