Ok, some more discoveries, that really should have been obvious to me: if you want a UserDb to work, it's got to be in a folder where Anonymous can view stuff, and execute SQL methods. Is there a list of what the different security settings allow? What's the difference between 'View' and 'Access Contents Information'? What is needed to allow someone access to a subfolder, but not to the top folder? Anthony