Hi, All- I have the "login blues." My company site allows anonymous visitors to enter a user login id and password, with the Role 'CoPersonnel'. It then allows them to create a project page and their project info... All is well and good until later, when they login to edit their page. It works, BUT it gives them permission to edit anyone else's page that has the Role 'CoPersonnel'! It also seems that while the first login is successful, they retain an 'Anonymous User' role. These two reside in a "Projects" folder: login_html, acl_users. The individual projects are located in a "Projects" subfolder: "projects_current." Do the acl_users and login_html file have to reside in the individual project folder? (BTW, I got the code from "The Book of Zope.") Any help greatly appreciated, this seems weird and I'm baffled. Thanks! Kevin