On my raq3 it's now possible for customers to view all the other sites as well as almost every file on the server. Customers used to only see their own files and folders, but now it's possible for them to browse everything.

I think it started just after I installed the last patch from Cobalt (May 13, 2002)

Anyone has experienced the same thing? how did you resolve it?

Have you tried removing the patch, to see if that solves it?