Thanks Nelson....

Once you got me pointed in that direction I did a little reading on this and found out that in addition to what you said about typing in the url...certian browsers do not send this info.... so it is not a really good solution for what I was looking for. It would work some of the time but leave holes so it is not a very good security measure. I will probably just go with permissions based on session variables.

Thanks for the reply.