On Tuesday 22 February 2005 12:50, Chris Wright wrote:
 I don't know, I don't think it's explicitly required by
CAPP (unless
 you interpret subject identity to include suplemental group IDs). 
Yes, this is what I was meaning.
 As far as groups go, they can become large (no longer a fixed size
array). 
I'm only wondering about the one group that was used to grant access, not the 
whole collection that any user belongs to.
-Steve