Okay thanks Dave.
I really haven't used the permissions functionality before in OpenACS and I'm looking around the admin pages trying to work out how to do what you've said.
/admin/groups reports:-
- (none)
/admin/group-types reports:-
- Groups (number of groups defined: 0)
- Application Groups (number of groups defined: 0)
- Define a new group type
I've also checked the relational segments and relational types pages too but nothing leaps out at me as obvious.
I tried the /admin/rel-types/ page and clicked on Membership Relation. I'm still waiting for the page to load (it reports number of relationships defined: 188432), is it the number of users that is causing the speed problem? Perhaps the answer lies within this page when it finally loads.
Now within the site-map I can grant permissions to the subsite entry itself. Do I do it here? If so how? The permissions/grant page is v. confusing - what would I type in the "On subsite name to: " edit box? I don't think this can be the correct approach so I need a little more help.