Given the release of Palm Beach HIV+ patient information via "accidental" attachment to a widely-distributed email, should agencies with access to confidential information implement mandatory access control and role-based security so that, barring problems with the RBAC/MAC software, confidential data cannot be accessed by roles that have external network access? http://www.sun-sentinel.com/news/local/southflorida/sfl-paidslist21feb21,0,1... I haven't found the list yet, but I found this: http://www.palmbeachpost.com/opinion/content/opinion/epaper/2005/02/11/a20a_... "In Palm Beach County, one of every 35 blacks is HIV-positive. That is compared with one of every 492 whites." Calling Tim May! Calling Tim May! -- Certainly there is no hunting like the hunting of man, and those who have hunted armed men long enough and liked it, never really care for anything else thereafter. --Hemingway, Esquire, April 1936