Web site folder permissions

Hi all, Now I know this is a pretty basic question but I am going to ask anyway... What should the permissions be on website folders? /Library/WebServer/Documents Now the reason I ask, I have got the perms as root:admin and drwxr-xr-x. With these perms I can Do apple+k, type the url of the servers site and mount the site folder from anywhere i like. Surely this cant be right? I would really appreciate some help here. Many thanks Gary.