How Linux decides who can open a file
You add a developer to a group with usermod -aG, but their open terminal still gets Permission denied. We trace task_struct credentials, the six-step newgrp syscall sequence, in-memory inodes, and the exact evaluation order inside generic_permission().