I tried it in a multitude of ways, (using SQLFORM and SQLFORM.factory) and none of them worked. I did not try setting dbio=False and doing it myself, however. Perhaps that's what I should have done. Instead, I turned is_administrator into something that gets set separately. Not optimal, but maybe I will try this route. Can't believe I didn't think to try dbio=False.
Thanks
