...

Try this and let me know how it works:

<dtml-in "objectValues(['Folder'])" skip_unauthorized> <LI><A HREF="<dtml-var id>"><dtml-var title></A> </dtml-in>

I think you misunderstand his question...he wants anonymous users in the top level folder to be able to run this code in viewing the top level folder so that they see both public and private sub-folders, because those anonymous users may also be users who have ids/passwords, but they may also be the non-users. When they access a private sub-folder only then should they be prompted for a password.

Ah - setting proxy roles is the best approach then. Brian Lloyd brian@digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com