Page permissions

[scott]

Good Afternoon,
I am having some difficulty controlling access. If I have some custom pages, I put them public_html/users, then assign permissions in the dashboard under the pages tab.

If I have users of admin and customer, and I do not wish the customer to see a page called say, secret.PHP, I would put the page in public_html/users and make the page private and give access to admin and not the customer.
Am I right? I think I am going slightly mad.

I have the following at the top of each page:

Code:

<?php require_once 'init.php'; ?>

Code:

<?php require_once $abs_us_root.$us_url_root.'users/includes/header.php'; ?>

Code:

<?php require_once $abs_us_root.$us_url_root.'users/includes/navigation.php'; ?>

Does anyone have any idea where I am going wrong please?
Scott