Jason,

> I don't get how this works. I agree that I could do some metadata queries to
> find out what roles people are using and therefore the permissions but I
> think it is a bit of a can of worms to try and automate this all.

Maybe IBX tries to prepare the update queries and traps the status error
codes, who knows...
I remember a previous discussion on this one. The unanswered requirement
still applies, I think. One wants a user to be able to only insert,
another to be able to only edit, all without modifying the application
and without adding code and data structures to track permissions, just
grant/revoke. Is this such an uncommon situation?
--
____
_/\/ando