Postscript: I actually ended up just putting the smbUserFolder into the root and assigning local roles to users yanked from this userfolder in each subfolder. Its not as kludgey as I thought it would be. Pretty nice, actually. I may later rework it so I don't have to emulate the group memberships of the NT domain using local roles (it's one more thing to manage, and I'm lazy, eventually I'll come up with something Rube Goldberg-ish to automatically assign roles based on fields in the smbUsers file). But--as they say in Washington--for now this works. pps - the <sniiiip> cracked me up... Thanks, Chris -----Original Message----- From: Chris McDonough To: 'Rob Page'; Chris McDonough Cc: 'zope@zope.org' Sent: 9/12/99 10:02 AM Subject: RE: [Zope] etcUserFolder and multiple roles Oof. I knew you were going to come up with something elegant and totally embarrassing. I'll just take my ball and go home now. That works. Thanks! :) -----Original Message----- From: Rob Page [mailto:rob.page@digicool.com] Sent: Sunday, September 12, 1999 9:57 AM To: 'mcdonc@iqgroup.com' Cc: 'zope@zope.org' Subject: RE: [Zope] etcUserFolder and multiple roles

I have a folder which does not acquire any of its parents permissions, we'll call it "Private". Private's parent is the root folder.

<sniiiip> Wow, I had to sketch this out on a breakfast napkin... <whew> Why not define the role PrivateUsers in the root folder and only assign it in the Private folder? Then, let PrivateUsers see everything in the root folder. --Rob