> Would your example prevent me from using the Compare operation? > Yes, as read access would cover all examination of the attribute. so without read attribute you could not get the value, compare the value or use the value in a filter etc. Mark