Our web files are stored on a Netware server. I want a particular group of
users to be able to edit one subdirectory in the web-site, but not the rest of
the site. So I've set up a Contribute permission group to do this, which works
fine.

In order to set up the user's connection, I have to give them Netware
read/write/delete access to the root of the site, to allow Contribute to write
and browse its temporary file which is what it does as it is checking the
connection details. I then set up the user's connection, including assigning
them to the Contribute permission group, and all is well.

Having got the user's connection working, I then want to use Netware
permissions to stop the user from being able to get direct network access to
the site (outside Contribute). So I have to remove the Netware permission from
the root of the site, and then give the user Netware read/write/delete access
to the sub-directory they need to edit, and Netware read/write/delete access to
the _mm directory where Contribute stores its permission group settings.

Now when the user connects, they get an error message along the lines of: "the
connection settings have changed, unable to read the permission group", and
they are now given unrestricted Contribute access to the site (although the
Netware settings are still in force, so at least they can only do things in the
sub-directory they need to edit).

So my question is this: is there any way I can set up Contribute users to edit
bits of my web-site and use Contribute group permissions without them having
full Netware read/write/delete access to the whole web-site?