After having read the Zope Book Security chapter and various other security howtos, I understand better how permissions apply in ZClass methods and property sheets. However, I'm still confused about a couple things. 1) What is affected by each of the 'Define Permissions' settings in the ZClasses main screen? I created a new permission and assigned it to different things in the list, but the only one that seems to do as I might expect is the 'Create class instances'. I can't figure out what the others do. 2) I have a ZClass that, upon creation of a new instance, creates an Image object in the new instance. Everything works as I would expect, but I'm not sure how (or if) I can define permissions to that object in the ZClass. More specifically, I have to give Image create/change/delete access in the container Folder where the ZClass instance is in order for the user to be able to modify the image inside the ZClass object. Is there a better way using the ZClass permissions? Does this make sense? I understand pretty well the permission system outside of ZClasses, it's just inside them that's giving me a headache. _______________________ Ron Bickers Logic Etc, Inc. rbickers@logicetc.com