Should a user without "set permissions" privileges be able to view /members/member-flags.pl? Should they be able to view a patron's privileges without being able to set them? Or should the page be blocked altogether? -- Owen