I believe the way it works is that you want to use share level permissions to assign rights to the folder and use security level permissions to assign rights to the contents of the folder. Peter?