Hello Florian, FR> I want to allow a user that he can do some actions as another user. FR> Something like "su - targetuser" for my web app. FR> Could somebody plz give me some tipps where to start? Try to use Proxy roles. Usually script is run with web user privileges, you may define special role for it in "Proxy" tab. -- Best regards, Eugene mailto:el-spam at yandex.ru