Alan Buxey wrote: > you are doing 2 seperate comparisons for the one attribute. is that correct/allowed? Allowed, yes. Correct... It would be better to shift complex policies to "unlang". Alan DeKok.