Hi Zopists, please can anybody explain (point to any documentation) why there is change in default permission setting for role 'Manager' when a new object is created? In older versions of Zope (2.2.x) when a new instance of any object was created (added) into ZODB role Manager had automatically set all permissions explicitly in addition of acquisition. Now (Zope 2.4.0 beta 3, Zope 2.4.1 - both from sources at FreeBSD) there is no explicit permission setting for role Manager when a new object instance is added into ZODB. I have also read very carefully Developer's guide and there is something what as I think is not working properly with setPermissionDefault method of SecurityInfo() object. I cite from from Capter 6: Security, subchapter Setting Default Roles For Permissions ---- As we saw earlier, the SecurityInfo interface provided a way to associate methods with permissions. It also provides a way to associate a permission with a set of default roles that should have that permission on instances of your object. To associate a permission with one or more roles, use the following: security.setPermissionDefault(permissionName, rolesList) The permissionName argument should be the name of a permission that you have used in your object and rolesList should be a sequence (tuple or list) of role names that should be associated with permissionName by default on instances of your object. Note that it is not always necessary to use this method. All permissions for which you did not set defaults using setPermissionDefault are assumed to have a single default role of Manager. Notable exceptions to this rule include View and Access contents information, which always have the default roles Manager and Anonymous. --- End of citation. Is it bug or feature? Thanks, Petr -- Petr Knápek Network Development NEXTRA Czech Republic s.r.o. http://www.nextra.cz/ V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic Tel: +420/2/96 355 111 / Mobile: +420/604-202 611 E-Mail: petr.knapek@nextra.com Contact address: Hlinky 114 / CZ - 603 00 Brno / Czech Republic Tel: +420/5/43 554 150 / FAX: +420/5/43 554 214 see Disclaimer http://www.nextra.cz/disclaimer/