BOb,
I always have two connections open, since I'm working with 2 SQL-Server databases (the application database for live data and the accounting database for lookups). The SysAdmin set up a specific user login which is linked to the VFP connections in my DBC. This login has all the necessary permissions for read/write in the application DB and read only in the accounting DB. So far it works fine. He's restricted the rights on the DBC for security reasons and is satisfied this is enough protection.

>Barbara,
>Thanks, this is pretty much what I have come up with. Since I am using an app role, I can't let the connection close since I will be upgradding the users rights with an approle. What I have resigned to do is give the 'public' role select access to the basic config table. This is the first opened. Once it is opened I run the sp_setapprole stored procedure.
>
>When doing this, have you ever had a connection other than number 1?
>
>Thanks,
>BOb