Hi,
> Thank you for help. I try to do as you say and put this to authorize  
> section after preprocess:
>
>        preprocess
>
>         # allow  hotspot users only
>         if (SQL-Group != 'Spot') {
>                 reject
>         }
 if (SQL-Group != /Spot/) ....    ?
alan