But what if I don't want to define any security at all?  I just want to serve up the report? I tried impersonate but that fails too, it looks like...

It's in the same db. If they can get to the backup files, I would be more worried about physical security rather than data.  Since our data is not really confidential...

I call it proxied login. I am making the assumption the webusers do not need the actual logins to the database. They just need to be able to work with...

Thanx rockmoose, I should have thought of this...sum first then crosstab. This works much better than my current solution.

I was looking for a faster query, but I guess that is asking for the sky.  Table is already indexed on the type and the order id so no help on...