Problem with user-permissions and site-edit

Alright here we go..

I need the following set up:

(1) 1 manager login for me where I can edit the whole site and all pages
(2) 1 manager that can add new gallerypages to a single MaxiGallery document and add images to the galleries
(3) Several web users that have to login before they can view any document on the site.

My problems:

(1) No problem.. this is default

(2)
I’ve added a new role called "Gallery manager" (all boxes checked withing "Content management" and "Run Module" checked
I’ve added a new manager user called "Gallery admin" and assigned the "Gallery manager role"
I’ve created two User groups called "Gallery admins" and "Site admins" and assigned a document group to each (Gallery admin pages + Site admin pages)
I’ve assigned the MaxiGallery document to "Gallery admin pages" and assigned the rest to "Site admin pages"

Now I can edit all pages with my site manager and when i log in as Gallery admin I am only able to edit within the MaxiGallery document which is what i need.

But now two things happen..
1. When not logged in, no site is show in front-end
2. When logged in as Gallery admin only the gallery shows in the menu.

I can see how the problem occurs as there are no public documents available but how do i resolve this problem? I need all the sites to be publicly viewable but at the same time not editable by the Gallery Admin

(3)
I havn’t gotten to this part yet but I would like some advise on this as well.. it will probable cause some conflict with the rest anyway

Are those manager groups you created, or webuser groups, which you’ve attached to the document groups? If you want just to restrict access in the manager, you need to use manager user groups rather than webuser groups, which will restrict public access to the pages.

it is manager user groups.. but isn’t there a way I can restrict the editing possibilities for one manager-user and at the same time keep the documents viewable to the public?

ok - so now I’ve created a new webuser-group and a new document group assigned to the webuser-group.
Then I’ve assigned all documents to the webusers and every site besides the gallery to the site-admin group.
I’ve created a login-page and made this the error- and unauthorized page so I’m almost there now.

The situation:

Now when I visit the site I need to login as a webuser to view any documents (good)
If i login as admin I still get the login page when I open the front-end but I can then login as a webuser and afterwards edit the pages (a bit unhandy but I can live with that)
If I login as Gallery admin I can now edit only the gallery but as I have to login as webuser in the front-end I can still se the other documents (satisfied)

BUT - If i browse the subpages to the gallery by the exact adresse (i.e. site.com/index.php?id=22) I can view the gallery without logging in as a webuser. And I can’t seem to find the option for assigning the subpages til the document groups?

Solved:

Just needed to apply the Permissions settings in the Roles for my gallery admin.

I guess I’ve solved all of my problems now except the fact that I need to login as a webuser before being able to front-end edit pages. It is a bit inconvenient but it’ll do..