I agree with this advice, but even more generally. That is when you need to allow for a specific task minimize the scope of what you allow. This not only keeps security tighter but lessens the chance for some program or error to corrupt your system. -- jludwig <wralphie at comcast.net>