In authorise you are doing group checks but have not populated groups. So authz fails. Either set the groups up in the sql or don't do group checking Alan