>I would appreciate if anyone can advise how a report engine can read MM security tables to enable it to selectively hide data in a report.

You can call the MM .NET Security Manager's GetAccessLevel() method to determine a particular user's access. You just pass the user's PK and the security ID. For example:

mmAppBase.SecurityMgr.GetAccessLevel(userPK, controlID);

Regards,