> Are you sure you caught them all? One way to be sure is to deny any > actions you don't explicitly allow. Your solution is definitely better because new actions may come in the future. Thanks for the tip.