How do you assign NO rights to certain subdirectories in a larger directory where the user actually has rights.