why are you checking

parent_cabinet->is_member

for

none

?

I just realized I read your message wrong! A user can have erroneous rights to documents that they should no longer be in the same cabinet as. So the first thing we do is check to see if they are a member of the cabinet because if not, then it doesnt matter at all.

sure, but you're redoing that at each level

I ended up cleaning up the whole thing according to your rec, and it's amazing! Thanks