If you are like me and don't like to start coding from scratch, but rather like to start modifying an existing and proven source skeleton, like the Boring product for example, one small piece of advice: watch out for conflicting declarations. It took me over one month (give or take) to find out why all my security assertions (such as 'security.declareObjectPublic()' and such) were totally ineffective: because I left '__ac_permissions__' skeleton code hanging. Once that was commented out, all worked finally as advertized. Still, a month of wasted search, running like a headless chicken through sources and docs. Painful and frustrating. I hope this little note might save someone similar frustration. Because Zope is really, really great. Cheers, Vio