2. logout as superuser (e.g. close all browsers...)

Ha, I always wanted to bring in a IMNSHO better way to "logout" - it works at least in IE. try http://log:meout@yourzopehost.com So the cached login/password are overwritten by log/meout and zope (or every other server) brings up the login dialog (as long as log/meout are not valid ;)) Should also work handy as a link in html (untested). cheers, oliver