Hello Thomas Try writing a plugin that uses the IAuthFunctions interface to prevent logged in users from calling package_update on datasets with state='active'. Ian