Hello,
I'm not new to dnn, but new to the forum area. Ok, here is my problem:

I have created a folder (Folder1) using file manager in Admin menu, and I gave "Open Files in Folder" right only to UserRoleA. All other checkboxes in Permissions matrix (except for Admin) are cleared. Then I add a subfolder (Folder1_1) to this folder, and I see that the permissions are still the same. So far so good. Then I uploaded three files, one htm (file1.htm), one js (file2.js) and one swf (file3.swf) files. As yo may imagine, htm file is viewing the swf file. Surely, I enabled these extensions under host settings before. Now when I write the url on the address bar of the browser (as unauthenticated user even), I can open the htm:

http://mydomain/Portals/myportal/Folder1/Folder1_1/file1.htm

I was expecting that, after giving this permission, only logged in user under UserRoleA can open the file (and admin of course), nobody else. Am I doing something wrong? Should I do something with Windows folder security settings?