yes, any dagabase record you want only editable by a certain user, you would have to create a field in that database to contain that userID. If you force them to log in, you can set it from the session variable and filter by the session variable to allow inserting and editing.