Hi, > Thank you for help. I try to do as you say and put this to authorize > section after preprocess: > > preprocess > > # allow hotspot users only > if (SQL-Group != 'Spot') { > reject > } if (SQL-Group != /Spot/) .... ? alan