Workgroup Manager Preferences

I am running 10.5.5 on a MacPro. When I use preferences to manage the apps the user group can run, the user still can't open some of those apps that are allowed, specifically, Garage Band and Firefox although there are more. If I use the folder option and allow those same apps they do run. The question is why do they work under the folders option and not under allow only these applications to run section? I am using only groups to manage, not individual users or computers or computer groups. There is also no local user of the same name. This just doesn't make sense to me.