Man, aren't you reading my mails? ;-) If you need to give access to single individual, you use their personal group. This avoids having to search through two tables, thus making code simpler. Alexey Parshin wrote: > What's the idea behind a group per person? > > > <http://www.sptk.net> -- Ilya A. Volynets-Evenbakh Total Knowledge. CTO http://www.total-knowledge.com