Hi Zopers, In my ccDocClass / propertysheets / methods / edit_properties method, right after reindexing the changed instance like so: <dtml-call "propertysheets.ccDocProperties.manage_changeProperties(REQUEST)"> <dtml-call reindex_object> (from the How-To: Creating a CatalogAware ZClass Created by AlexR. Last modified on 1999/10/31.) I have the following: <FORM <dtml-if "AUTHENTICATED_USER.has_role('ContentManager')"> ACTION="<dtml-var URL1>" <dtml-else> ACTION="edit_propertiesForm" </dtml-if> METHOD="GET"> Why do I get URL1 if I authenticate as the "superuser" (the user who installed Zope)? That user shouldn't have role ContentManager, should it? Is this some kind of IE (5.5) caching hassle? If I login as a different 'Manager' (defined in the root's acl_users folder), I get edit_propertiesForm as I'd expect. Another question: is there a good way to let a user login using only the builtin acl_users mechanism? Hmm, I think I answered my own question: Say <a href="confirmation">Login</a> and make the 'confirmation' method require authentication. (Now how do you do that again?) Ah well, g'night! -- jean (running Zope 2.1.6 on W2K)