in fairness to LK here, 'struggle' might not be the right word. it's just the all-or-none aspect of permissions within a single container leaves something to be desired when making anything but the simplest of apps. having worked w/ LK a long time now, i'd say it's really important for the developer/admin to understand how container/security work within LK; however, I try to make which folder you're in as invisible as i can to the user.