Hi, after I settled my problems with the Zope authentification system and dsicovered some nice tricks about Zope, with some help of some very gentle people of course, I have another problem. How can I allow a certain role to add local roles to an object? Which permission do I have to activate, that this is possible? At the moment I have solved the problem with a Manager proxy role, but I like to live without proxy roles. Bye, Oliver