To put it another way - your appl should control the access that a user has - different screens/functions available depending upon the signon credentials. The entire application's sql use (or all 'users' of the database) should have a minimal number of user ids associated with it - both to make programming simpler and to minimize the number of 'entry' points to your database. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php