Don,
Ok.
Now I mostly understand.
THe issue you referred to inadvertantly granted admin to all memebers of a subsite, that is decidely bad.
I thought my composition_rels were correctly setup. So I will have to go back and make sure that is correct before blaming the data model.
Thanks alot for replying. I will get this someday, and hopefully write some documentation, and a helpful API on top of it all.