A user gets created for each individual software package installed under DSM 7. Adding the individual user for the RoonServer package to your library folder and giving him sufficient rights might do and is possibly better than removing rights (or give rights to everyone). Read more about it in this post: