AccessMonger Pro has groups, tiers, permissions and the ability to bundle them all together into a profile you can apply to a given user, then customize individually.
It doesn't use functions as you describe to test for permissions, though. It uses a variable assignment (to define the permission or permissions allowed to access a given block of code) followed by a cfinclude and a cfif to test the result. Functions would definitely be cleaner. Includes are survivors of a codebase set down in olden times, and still around thanks to my busy social calendar. Its more than just permission assignment, though. Full user management. Login, automated password reset and so on. I didn't implement anti-permissions the way you describe them. I looked at them and decided that the way this system is structured with respect to user customization that it could be handled differently if that need was present. Not 100% sure that decision covers all circumstances but I have yet to hear differently from a user so its held up pretty well on that score. http://mysecretbase.com/AMPro_Home.cfm -- [EMAIL PROTECTED] Janitor, The Robertson Team mysecretbase.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| CF 8 â Scorpio beta now available, easily build great internet experiences â Try it now on Labs http://www.adobe.com/cfusion/entitlement/index.cfm?e=labs_adobecf8_beta Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:281014 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

