Hi, I've done quite a bit of searching for this problem I have. I get the following traceback from changing a role of a document to Manager: Forbidden You are not authorized to change addUser because you do not have proxy roles. Traceback (innermost last): File F:\WEB\PACTIV~1\lib\python\ZPublisher\Publish.py, line 151, in publish_module File F:\WEB\PACTIV~1\lib\python\ZPublisher\Publish.py, line 115, in publish File F:\WEB\PACTIV~1\lib\python\Zope\__init__.py, line 158, in zpublisher_exception_hook (Object: addUser) File F:\WEB\PACTIV~1\lib\python\ZPublisher\Publish.py, line 99, in publish File F:\WEB\PACTIV~1\lib\python\ZPublisher\mapply.py, line 88, in mapply (Object: manage_proxy) File F:\WEB\PACTIV~1\lib\python\ZPublisher\Publish.py, line 40, in call_object (Object: manage_proxy) File F:\WEB\PACTIV~1\lib\python\OFS\DTMLMethod.py, line 296, in manage_proxy (Object: addUser) File F:\WEB\PACTIV~1\lib\python\OFS\DTMLMethod.py, line 289, in _validateProxy (Object: addUser) Forbidden: (see above) That I don't have authorization to change the role. But I change granted owership of the permission to myself in the folder and also document security tabs. So, I've read as much advice that you have to own the role (Change Proxy roles), which I think I just did. I also have it set in the root. Something wrong? Thanks, Paul Zwarts