Roloff, Tim wrote:

is there a "standard" way to restrict the use of certain tools by a password? Or would it even be possible to modify the list of visible tools depending on which user is logged in?

Hi Tim, You might be able to do it with some tricky mod_rewrite rules in Apache (e.g. redirect users attempting to access unwanted tools), but a simpler solution would be to run a separate instance of Galaxy and restrict access via Apache. Both can safely use the same database instance as long as you set 'track_jobs_in_database = False' and 'enable_job_recovery = False' . --nate