How can I change the way the security model works such that to view an object, a user must be a member of ALL associated roles, not just one of the roles? -- Don Johnson drj826@acm.org http://drj826.home.netcom.com ICU: 64729954