I've put together a brief summary of the Java security model for comparison with Zope's present and future security models: http://www.zope.org/Members/jim/ZopeSecurity/JavaSecurityModel This is based on pretty limited research. If I've gotten anything wrong or missed any important points, please add comments or corrections. (Note that the above URL points at a wiki page, which you can edit if you are a member of zope.org.) Jim -- Jim Fulton mailto:jim@digicool.com Technical Director (888) 344-4332 Python Powered! Digital Creations http://www.digicool.com http://www.python.org Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email address may not be added to any commercial mail list with out my permission. Violation of my privacy with advertising or SPAM will result in a suit for a MINIMUM of $500 damages/incident, $1500 for repeats.