> > Can you list them? following up my own email ... I found the GUI interface in w2k (its in local_security_settings->user_rights_assignment) and it looks like there are 34 currently. That means we will definately not use bitmasks. I'll index by string, but will also assign a number when we add one (I suspect we'll need this for SAMR replication).