Hi Mattes. You are not supposed to look at the ALLOW/DENY values directly. there are API functions to evaluate a certain fields value for you. - kasper