In my case, Bob is a user on both the DNS-323 and my Vista. When I'm logged in as Bob, I have access to Volume_1 and everything else with W/R. When I log into my Vista as another user who is not setup on the DNS-323, I do not have access to the Volume_1 and have read only access to Music without it asking for any credentials.
Not sure why it's working for me but it seems to behave like it did with 1.06