how to record labor hours spent on a project

[TimSchofield]

With the security token - I thought I used similar logic to the selling prices token? I'll have another look.

To be honest I never liked that either. If we must hard code the security token it is better to go very high for the "reserved" ones, say 1000+ and then block SecurityTokens.php from accessing anything over 1000 so that they cannot be altered, though in this case a www_users flag is a more logical solution.

Tim