.. an editor role) dependent on the user belonging to a certain group. AFAIK none of the products USerDB, GUF oder etcUserFolder provides hooks for this.
A role *is* a group. You grant arbitrary priviledges to a role, and all users with that role (members of that group) will also get those privs.
well, in principle it isn't I think. However you sure can use roles for emulating some kind of group paradigm. Having a group e.g. for certain folders would not need more than one role for all of them. If I try what you suggest, what's a good way to create a new role when I create a new subfolder? e.g. I have a DTML method for creating new departments' folders, therefor I need to create a new group for each of those with the same set of permissions .. thanks Oliver