Thanks for this useful information – or, to put it another way, thanks for confirming my suspicions.

> If your company has any level of IT security …
Oh, yes. Oh yes indeed. It's taken months to find the one person in the support staff who realised my PC had to be moved (for an hour!) to a different security zone so that I could update licences from a major software company.

Fine-tuning SharePoint access is a theoretically interesting solution, but I'll be shot down in flames if I suggest polluting our environment with folders. I'll take a look at the possibilities for managing read access to an individual document, and then be shot down for adding to the load of our non-existent local administrator.