You could do this in the application or in AD. If done in AD, there would be multiple groups for your application. You could query AD to determine which groups the user is in and expose functionality that way.


>This explains some things. Thank you.
>
>But in my application a user would have to be assigned to a specific area of the application, by the application Administrator. The customer wants this to be transparent to the user. That is, when user John Smith loads the application, the value of "Site Number" (hidden from the user in a table) is set to the application object. And based on this Site Number the user will have a restricted access. Therefore, if AD is the way to go, I would need to give the VFP Administrator a tool to set each user (from AD) to a Site. Maybe this is not possible; this is why I am asking.