Yes I am. And it allows everyone to view and have access to download all files. I really need to allow access to a folder per user (at the user level) or a role that is restricted at a category. Your access control will not work because each user will not know who has access and does not.