Security and Right Assignments

I have a Netware Tree comprised of 4.11 and 5.1 servers. It seems that no matter what kind of file/directory access I assign to my users, it winds up that they have access to the entire tree. I have created two groups and assigned one group only Read & Filescan access to the PUBLIC Folder on the SYS volume. The second group has been assigned R,W,C,M,D rights to two folders called APPS and DATA on VOL1. There are no user except myself with individual rights assigned to them. My problem is that all users have access to everything and I need to fix this.

Please Help.