I'm moving my web site from OS/2 to Suse 8.2 and I've a few questions to understand how to deal with the permissions. The installation creates a user called zope which owns the directory var/gadfly and also var/gadfly/demo. I tried to create another directory, gadfly/db to put my database files in. However, I could not 'su zope' as I didn't know the password given at install time. I was not present during the Suse install but my colleague doesn't remember having seen a password for Zope (as stated in a couple of pages online, the install script outputs a password). Then, I went root and I gave zope a new password. Only afterwards, I realised this was probably a mistake. What happens if I restart Zope? Anyways, even after changing the password i could not su zope. Nothing would happen. So to create var/gadfly/db I went root and then chown the directory to zope. Was this the correct procedure? Also, I've a little External method file to install. Should it be owned by root or by zope? Any good piece of advice regarding zope security in Linux? (it's an internal web site but still) Thanks, Fernando