Hi Steve, ValZ,

Thanks for your advice.  I am going to try Domain Service because if users can edit the URL and get to data they shouldn't see that will be a problem for me.