Hi all, I was trying to play around with BOA Constructor, but couldn't get into some Zope folders (BOA was throwing cryptic errors at me). I found out that the problem was with the latest version of core session tracking, which uses "setDefaultAccess('deny')" in both sessionData and sessionDataContainer. My quick fix was to comment these lines out, which I assume is not the best solution, but it got me going at least. CST is the only product I have that uses setDefaultAccess(). Anyway, just in case someone is interested to know (Chris?) Cheers, Jean