I use an index to call my pages and the premission doesn't work

[Brandin]

I have the following page format to this situation:

Code:

usersc/report.php

Code:

usersc/includes/orderreport.php

Code:

usersc/includes/orders/bo.php

Code:

report.php

allows CSR (normal level 1 access)

Code:

orderreport.php

allows CSR (normal level 1 access)

However,

Code:

bo.php

allows System Admin (normal level 2 access), but I can still access this page as a CSR.

All three pages have init and the securePage query.

I'm thinking this is similar to your situation, kwix?