We have a publicly addressable MOSS 2007 site which is only accessable to users with windows accounts. Off the root Site collection, we have a series of sub sites:
How do I allow a set of AD users access to the moss/depts/safety site, but not the moss root site or any other sub sites? I've tried to give them Open Only rights at the root, then break security inheritance for the safety sub site, but that doesn't seem to do the trick. They can go directly to depts/safety, but cannot go to http://moss