Actually, I was going through some of the archived documentation for SA, and noticed that in the example there, the rule only had the second condition, without the original one to be logged in. I tried taking that out in my example, and it looks like its working now.
Does that sound about right?
One other question on this - if I have one set of pages that are restricted to one group, and another set of pages restricted to a second group, what would the rule be to allow a third group access to both sets of pages?
EDIT - think I've got that now. I would use the Groups?
So I would have three user levels:
1. Administrators
2. Tour Operators
3. Lodge Owners
And add two new groups:
1. Administrators and Tour Operators
2. Administrators and Lodge Owners
And the In Group as my criteria in two rules based on those groups.