Seeing that 'manage' isn't defined as a role (looking at http://localhost:8080/manage_access ), I was confused about where it came from. Turns out that the superuser (the one entered when installing Zope) has that role, and managers defined "inside" Zope have the role 'Manager'. Is this documented somewhere? -- Jean Jordaan -- technical writer -- Mosaic Software -- Zope 2.1.6 on WinNT and W2K