Thanks for your reply but I think that this is exactly what I have done...
In the same database, I have a Guest Account and about 2500 passworded accounts. I have created three custom privilege sets. One for the first password site called "Password Read Only A", one for the second site called "Password Read Only B" and one for the Guest account called "Guest Read Only."
The Guest Account's custom privilege set called "Guest Read Only" is set as follows: "Guest Read Only" has only XML and XSLT turned on. In the "Records" setting, view access is applied to only one table and further, only to a limited set of fields in that table. In the "Layout" setting, I have selected the appropriate layout and set it and the records on it ot "view only." Value Lists and Scripts have no access. Unless I am not understanding the Filemaker interface correctly, this is exactly what I want.
My problem is that IF the Guest Account is turned on, the websites that previously asked for passwords DO NOT.
Scenario: I access the passworded sites with Guest access turned off and all is well. The browser asks for a UN and PW. I activate the previously described Guest Account, QUIT the browser to flush the authorization, once again access the password protected sites and BOOM, I'm in without entering a UN and PW. It's like simply turning the Guest account on turns all protection off!
Am I reading your answer incorrectly?