On 11/18/2009 02:53 PM, Casey Dahlin wrote: > The answer is: because being associated with a login on the local console doesn't verify that it is a /user/ in control. Bingo. I guess everyone else missed that day in Security 101 class. Jeff