Object permissions are stored with the object in the frontend, so yes a
change to the permissions, is a change to the FE, requiring re-distribution.
Users' passwords are stored in the mdw file.
The mdw file stores Groups, Users, PIDs, passwords, membership (what
users in what groups).
Joan Wild