David -- Thanks for the tips. What I discovered was that my testing of putting a group within a group was what was causing the problem. In Group A, I'd put group B (which had full access). Group A itself had read-only access, but apparently putting group B into group A gave anyone with group A full access (even though they weren't members of group A and even though group A didn't have full access). I'd understood that giving one person several groups would result in the least restrictive access rights (e.g., group A + group B for a person would result in full access), but not that having group B be a member of group A would extend group B's rights to any group A member... Anyway, removing the group within a group solved the problem. -- Sue

>Susan,
>
>>I've been setting up users and groups for the first time, and something seems to have sprung a leak. Initially, I set assigned each user to one or two groups, and all worked fine. For example: group A read-only + group B none = read-only. Unfortunately, I added two other groups for a number of users. They are now set up as: group A read-only, groups B-D none. Since that happened, these users have FULL access to the form. What am I doing wrong? Any help would be greatly appreciated.
>
>General troubleshooting tip: Go back and re-check to see that you really have the form id listed for all the groups and that the settings are really as you describe above. You might also want to look directly into the security tables to verify the above and be sure there's not a duplicate record there for one of the groups that gives full access to the form. Perhaps also reindexing the tables would be wise if the problem persists.