I am using the Links module predominantly on a site for it's "Module Mode: Folder" option. 

I am finding that some test users are not able to access the files I linked to. Is it because the test user needs "write to folder" security access under the file manager for that folder? Its the only difference I have found in roles so far. And if so, will giving users (customers) 'write to folder' access allow them to manipulate the files on the server some how? That would be bad, but I'm not sure how they would manipulate them even given this access if there is no module giving them a portal to the folder(s). 

Thanks

Mike

Thanks for the response Chris. The customers only have access to pages containing the html and links modules (they do not have edit access to either of the module types, nor do they have edit access to the pages). I'm not able to see any potential back doors, but then again, that's why I'm asking here first. Are you referring to another method I haven't anticipated?
Mike