These general concepts apply to the most common configurations:
User and authority data is usually stored in tables VFPPF06 and VFPPF07 on the server
Data in VFPPF06/07 controls access to Framework objects for VLF-ONE and VLF-WIN
There are two sets of user profiles and passwords on the server
You can assign authorities to groups of users
In design mode security is not applied