I'd vaguely heard of RBAC before, but never really looked at it much. Oddly, I think I already implemented a stripped down version of it. My past experience has shown me when I reinvent something that I didn't know had a name, I'm usually destined to do it poorly, so I'll dedicate some time reading how others have built their RBAC systems. I'm still parsing the rest of it, and I'll do some code with it later. Thank your for the info.