[Zope] SQL Methods

I have a sql method and a dtml method calling the sql method. They live in the same folder and the dtml method's proxy roles are set. I've tried everything and Zope tells me I don't have permission to do view the sql result returned by the sql method. This worked fine in Zope 2.1.6 so I guess it has something to do with the new security model. I also have explicit ownership of all objects that I'm working with - still no luck. Any advise? Roché