If you enter an ID and the wrong password, you are given the "invalid credentials" message.
If you enter an ID with the correct password, you are logged on correctly. However, if you enter a valid ID, and leave the password field blank - you are logged on as that user with all their rights and access. Shouldn't the password field be a required field? Is that a configuration option somewhere? -- Dr. Louis Smith, ThD
