USB Connected Hard Drive Permissions with AFP

I have noticed that using the web interface to control permissions for a USB mounted external hard drive does not affect the permissions in regards AFP.   My goal is to prevent public access to the USB shares, which is working when the drive is mounted via SMB, but not AFP.  Any help is greatly appreciated.