From: Anthony Baxter <anthony@interlink.com.au>
Now, in the top/ folder, I've created both admin and user roles, and I've put a UserDb in it. I initially wanted to have the UserDb in only the user/ folder, with the assumption that acquiring objects from the top/ folder would "just work" without defining the users in the top/ folder... This didn't work (no idea why, anyone?).
Yep. A UserDB folder has to be at least an 'uncle/aunt' of any folders which plan on using it because the sibling folder behavior of Acquisition would allow one to bypass security otherwise (at least that's my take on the situation).
I would still like to also have a separate User Folder in the admin directory, since administrative accounts are not stored in the SQL database used by users. But no matter what I do, I always get prompted with the docLogin screen from the top/ UserDb.
You might create UserDB folder one folder up and only allow the admin accounts in that acl_user's folder. UserDB sql queries usually make that pretty easy to do. Kent