"Validate=" controls the level of security of your list, and not what users are allowed or not allowed to do. With version 1.8a there is a confirmation mechanism that does not require the use of passwords and it allows users to execute commands that were previously not possible with "Validate= All" because there was no way for a user to validate them. If you want to restrict SIGNOFF and the like, you can use a list exit. Eric