yes, he might submit and read from the same table, but the permissions are not based on what he submitted, but basically on a group membership (permission given by administrator)

(he also should be able to read data he created, because these rows will be tagged with the group he belongs to)

martin