Here's what I'm trying to do:

I would like to create a list of documents on a site in my company's SharePoint site. Each document should have specific user's permissions to view and edit it.

For example: The list is for performance reports. John has his out there called "John_PR_09.docx". Only him and his supervisor should have permissions to view, edit, or do anything to it. And then another employee has hers out there with permissions for only her and her supervisor, and so on...

I have tested this out with a document that I removed the groups and users from (since they inherit permissions from it's parent) and only gave my user account permissions to. I then asked someone else to try and open and she could, she even wrote "TEST" on the document and saved it.

What am I doing wrong? I thought I stopped it from inheriting permissions from it's parent and only gave myself rights to edit it.