Wasn't 'tom' one of your users? yes, but user 'tom' should stay also. They both have the manager role, except that 'tito' (a sub-manager) can do less then 'tom', because 'tito' is declared in a sub-folder (in which I've changed the permissions of the manager). (although, that was the intention, because it doesn't work.) mmm... I'll try it once more. Tom.