We are trying to restrict Feature Rights at the folder (or file) level. For example, we have a HR folder where we do not want users to be able to download, print, or save a copy in anyway. 

We have noticed that as soon as a user becomes a member of a security group with the Feature Right enabled, it will allow them to print or whatever anywhere in the repository. Even if the second security group is does not have access to the file or folder specifically. 

I am guessing that we can't change feature rights at a granular level, and that it is a global setting.