syncitems and getevents should allow a "getuser" variable. A username and password are still allowed to be sent. This would allow remote sites to gather data on multiple people (for instance... a group of software developers all use livejournal to keep track of their updates) without requiring the user names and passwords of each of those users. If a username and password are supplied... then standard livejournal security rules fall into effect based on the permission levels of that user in regard to the particular entries/users. However... it should also be accepted to not supply a username and password (as long as the getuser parameter is supplied) which will inform livejournal to only display the entries that are publically viewable.