Hi,

>Also, more importantly in some situations, any user can change settings for other users so it can't be used for any type of access-level settings.
>
>I would never dream of putting security information ( which I consider access levels to be a part of ) into an ini file. Nor would I, for that matter, store them in the registry - I would store them some place that is - er - well, a little more secure < s >.

My argument was just that the registry is, at least, a 'little more secure' than an INI file - it's not easy (or shouldn't be) for anyone other than an administrator to make changes to another users hive. I'm sure the best solution will vary depending on the type of application and the environment in which it is used...

Best,
Viv