Laurie, After your user has logged in, are you using something like this to iterate over the folders? <dtml-in expr="objectValues('Folder')" skip_unauthorized> <dtml-var id> </dtml-in> The skip_unauthorized tag _might_ be what you're looking for. Troy -----Original Message----- From: Laurie Nason [mailto:laurien@tiger.bcm.tmc.edu] Sent: Tuesday, June 05, 2001 5:32 PM To: Zope Subject: [Zope] Permissions etc... Ok guys here's the problem I have various labs who each have users - each lab should be able to see it's own data only which is organised as follows... Root |-->MyDB |-->acl_users (for the managers) |-->Groups |-->Group1 |-->acl_users (for each of the members of the lab) I have 2 roles created in the mydb folder (dbusers and dbmanagers) - each of the members of each of the labs is assigned into one of these two roles. All my dtml methods are stored in the mydb folder. The dbusers and dbmanagers have view permissions and access contents information for all these methods. I want the users to log in and then be able to look at the index_html in the mydb folder which then iterates through the groups that they are in and displays them. I thought that if I gave the role dbusers permission to view the index_html document they would have to log in and then the document would work as required. Only it doesn't.... Is this the best way to do this? Any other ideas...? Laurie Laurie Nason Dept. of Biochemistry - N420 Baylor College of Medicine Houston. TX77030 _______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )