# Troubleshooting access
Permissions in Falconer usually do exactly what you expect. The questions below cover the few cases that surprise people, so you can tell intended behavior from a real problem.
I restricted a doc, but it still shows up in search
Search and agent answers use the broadest access a doc has from any of its locations. If a doc is reachable from one place that is still open to your organization, it stays findable for the people who can reach it that way, even if another location is locked down.
This is intended. To fully restrict a doc, make sure every place it lives has the access you want, not just the one you were looking at.
I moved a doc or folder and now different people can see it
When an item uses inherited permissions, it follows the access of wherever it currently sits. Moving it into another folder makes it inherit that folder's access, so who can see it can change even though you never opened the share dialog.
If you want an item's access to stay the same no matter where it lives, switch it to custom permissions before or after moving it. See [Choose inherited or custom permissions](/docs/use-cases/manage-permissions/choose-inherited-custom-permissions/).
I gave my whole organization access, but an external collaborator still can't open the doc
"Your organization" access only applies to members of your Falconer organization. Guests and external collaborators are not members, so they do not get access from that setting.
To give an external person access, add them directly under **People**, or turn on **Anyone with the link** for the doc.
Why can everyone in my organization edit my new doc?
New docs and folders use inherited permissions by default, and they inherit from wherever you create them. A doc created in a shared company location inherits that location's access, which by default lets your whole organization edit.
"New" does not mean "private," and "inherited" can mean "anyone can edit" depending on the location. To restrict a doc, switch it to custom permissions and set the access you want, or create it in your private docs first.
The sharing controls are greyed out and I can't change who has access
That doc or folder is using inherited permissions, so its access comes from a parent folder or section. The individual controls are read-only until you switch to custom permissions.
Turn off inherited permissions to make the item keep its own settings. Falconer copies the current access in so nothing changes until you edit it. You also need edit access to change sharing in the first place.
I can't remove the last person with edit access
Every doc and folder needs at least one person who can edit it, so Falconer blocks a change that would leave it with no editor. Add another editor first, then remove the original one.
An old doc I never shared is visible to my whole organization
Docs created before inherited permissions existed can resolve their access from where they live. If such a doc sits in a shared company location and was never given its own access settings, it can inherit that location's organization-wide access.
To fix it, open the doc, switch it to custom permissions, and set the access you want. If you have many older docs to review, contact support and we can help you audit them.