Firstly, thanks for your reply.
I've tried both of your tests.
1. Yes, once I add an account in USER group directly into the the Section Access table, this account is able to access the document without any problems.
2. No, if I remove an account, say CUSTOM\ADMIN, from the SA table, this account cannot access the document any more.
Is there a special setting for using group names in NTNAME column?
did you load the section access table into the document to see what it returns ?
if your Section Access Table is named "test" the URL would look like this.
From the script
Data From Files >> [Web Files]
tick "internet file" and paste in your URL
(html, codepage is 1252, embedded labels, table is test);
Sorry I don't have much more, I'm working through this too