[LiveUser] Newbie Q's

Hello, Ok, I'm trying to wrap my head around the basic usage of LiveUser. I've been working through the tutorial, and written a 'liveuser_init.php' script that I used to add my initial administrative user. Right now I have no groups or rights or anything else defined. I just have a user added to the User and Permission containers. It looks like, the basic idea of LiveUser, is that LiveUser doesn't itself protect any pages or anything. It just gives you a way to define users and group (well, I'm using DB_Medium), and you can define and arbitrary set of rights (whatever you want can be a 'right' - you just give it a symbolic name, and LiveUser maps an integer to that symbolic name or lookups in the container. Then, as far as actually *enforcing/implementing* rights, that is up to me as the developer, correct? LiveUser allows me to ask the questions, who is this user, and does this user have (either directly, or through inheritance from the group it belongs to) right X. My code then decides what to do, if the user has right X or not. Is this correct? And how do 'areas' and 'applications' fit into this model? In defining areas and applications, I can have rights that are granted to a user in one area/application, but not another? How does LiveUser figure out what application/area the user is in? Is it based upon what file they are accessing in the filesystem, or do I have to use something like '$objPermAdmin->setApplication($appName);' ? Jeff Schmidt