I would get rid of the force user and valid users stuff in the profiles part and instead implement this by setting the unix permissions so that the user is the only one that can see their data. John