simple 'manager users' question

I have a site (v.0.9.6.3) in development with very simple permissions requirements.

There should be 1 top level admin, myself, and one lower level admin, who can create, edit, save etc... certain documents.


In Security > Manager Users, I have created a new user "m"

In Security > Roles, I have created a role for this user "mrole" with most of the boxes in ’General’ and ’Content Management’ selected, but nothing else

In Security > Manager Permissions, I have:
- created a user group for user "m" called ’muser’,
- created a document group called ’mgroup’,
- linked ’muser’ to ’mgroup’


I then went document by document, and specified the Access permissions by selecting the ’Site Admin Pages’ (default upper level group) for some of my documents, and both the ’Site Admin Pages’ and ’mgroup’ for other documents.

However, i notice in documents for which only the group ’Site Admin Pages’ is permitted, that in the Page Data > General > Status section, ’Manager Access’ is listed as ’Public’. Further, if i log on as ’m’, all the documents regardless of which group they’ve been assigned, are editable. Changing the specific types of permissions in the Roles section does have an effect, so that works.

But any idea why i can’t prevent this user from editing documents which aren’t assigned to their group?

Thanks in advance for any help on this.


Update:
Nevermind!

I deleted all users, groups, and roles and started from scratch, and everything worked fine. Probably there were some legacy permissions from my initial install.

The best info on permissions:
http://bobsguides.com/permissions.html

I checked out: http://bobsguides.com/permissions.html but still am unclear on why my site is behaving strangely.

When i edit a document, I have 3 checkboxes in the Access Permissions section:
All Document Groups (Public)
mgroup
Site Admin Pages

Two things are happening - when i assign any permissions except the default ’All Document Groups (Public)’, the document is not viewable online at all, by a normal visitor. So going to that documents page in another browser, results in a message:

"ERROR: Too many forward attempts! The request could not be completed due to too many unsuccessful forward attempt"

In the General Page Data Status for that document, both Web Access and Manager Access are listed as Private. Now even if both Web and Manager access is private, shouldn’t a normal visitor to the site still be able to see the page?

Further, preventing document access to users in group ’mgroup’ is not preventing them from accessing the documents once they log in - it has no effect.

I do have managermanager installed for the purpose of allowing users to edit galleries, could this be the issue?

Nevermind!

I deleted all users, groups, and roles and started from scratch, and everything worked fine. Probably there were some legacy permissions from my initial install.