Ah, you mean the forum community groups, I'm not sure they were set up to be used for this type of permissions. Especially since it might be "public" users.
Only thing I can think of is create a global event handler that reacts when someone changes groups and assign a normal rule. But I'd be careful with setting permissions for those roles.