Forms Authentication problem

hi,
i have 2 folders(Members,Admin)
Members only access Members folder,Admins access Members and Admin folders
but Members can access Member and Admin folders when members was login
i dont know why members can access Admin folder
 
please help me
thanks for helps
SmaRT_AleCK
 
web.config code;
<authentication mode="Forms">
<forms loginUrl="~/Login.aspx" protection="All" timeout="15">
<credentials passwordFormat="MD5">
<user name="Admin" password="AdminPwd"/>
<user name="Member" password="MemberPwd"/>

</credentials>

</forms>

</authentication>


<authorization>
<allow users="*"/>

</authorization>



<location p ...