Does the group he's in have can_target set to !%<the_other_group>?
I don't really remember, and MrP/Megiddo/Stickly Man likely remember clearly, but that might be causing the issue.
I'm not sure we wrote player permissions to override group permissions.
Individualized commands, sure, but, group policy, not sure about.