subfolder permissions overruled

hello 
I have the following setup : 
user1
user2
user3

only 1 rootfolder containing: 
\subfolder1
\subfolder2
\subfolder3

all users have traverse/list/download rights to the rootfolder
subfolder1 inherits the rights so all users have access to this folder
only user2 has traverse/list/download rights to subfolder2
only user3 has traverse/list/download rights to subfolder3

but when I log in with user2 or user3 they have access to all subfolders

I checked the rights in the .mdb and they seem to be ok there

nevermind I read in other posts that you have to create a rootfolder for all folders .. 

Actually, you can also accomplish this with the subfolder permissions without using separate root folders.
You should add user2 and user3 to the root level with Traverse permission only. This way you can override their full access coming from the group membership. Traverse permission will be required to allow them to at least navigate to the subfolders they can access.