I've done some searching, but can't seem to hit the right keywords. I'll pick on the major donor group for this question, though it would apply in other ways.
Most of our users should have access to almost all of the contacts. However, there is a small group who deal with major donors. This group is only group who should be able to see the major donors.
Currently we are using a group for major donors, and a smart group for anybody who is not in the major donor group. The majority of users are in a user group that allows them to edit anyone in the unrestricted contact group. This works great, except when adding a new contact.
When the new contact is not in the major donor group, the majority of users still can't see the new user until the cron job runs to rebuild the smart group cache. This messes with people's process and they loose where they are and what they are doing.
Is there a better way to restrict the group? Can I set an ACL so that it's looking at anything that's NOT a part of a group, rather than a part of a group? Anybody else doing something similar with a better way of doing this? Can I set all new contacts to automatically be a part of the unrestricted smart group by default?