And a couple of minor things :
1. The mormot Framework SAD describes security group layout as POST SQL SELECT SQL Auth R Auth W Tables R Tables W Services
Notes in mORMot.pas show POSTSQL SELECTSQL Service AuthR AuthW TablesR TablesW
** Note the position of "Service" (I'm assuming the mORMot.pas sequence is correct).
2. For "Admin" we have "VALUES ('Admin',10,'47,1-256,0,1-256,0,1-256,0,1-256,0')". I'm confused by the ",0," values. Are they just field separators ?