Hi!

I tried to remove the user on a password-protected page and this message hits me: "Access to the path 'D:\Data\customer\data\access.xml' is denied.". We've set full read/modify permissions for the ApplicationPool-user and Network Service on every folder. 

If I try to republish the node or tries to edit the permissions, umbraco is throwing out this: 
Object reference not set to an instance of an object

[NullReferenceException: Object reference not set to an instance of an object.]
   umbraco.cms.businesslogic.web.Access.IsProtectedByMembershipRole(Int32 documentId, String role) +119
   umbraco.presentation.umbraco.dialogs.protectPage.Page_Load(Object sender, EventArgs e) +1413
   System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) +24
   System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) +41
   System.Web.UI.Control.OnLoad(EventArgs e) +131
   umbraco.BasePages.BasePage.OnLoad(EventArgs e) +20
   System.Web.UI.Control.LoadRecursive() +65
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +2427

Any clues what's causing this? 

Setup: Umbraco 4.0.1, ASP.NET 3.5 on IIS7 (Windows Server 2008). SQL 2008. 

/ Patrik