I retry my question because it's important for my actual project. It seems to me that the authenticate- method is not working in Zope 2.2.4. Because of security-reasons?? 'Authenticate' can be used to compare the log-in-password with the one saved in the acl-users-folder. But if it's true how should I check if the user knows the Password?? Thanks