Expanding on my last post. Creating a user name/password combination is only the first step. Next you must specify the directories and R/W permissions for the users you created in step one. Finally, you need to make sure there is no global r/w access (as this will override any limiting access defined at the user level).