Hi, David thank you for the tip. But that doesn't work either. If I only set "Access Contents Information" I get rejected by Zope although GUF authenticated me. If I set "View" and "Access..." permissions I can access the index_html in the folder without any authentication. These tests were all done after shutting down Zope and my browser. ------------------------------------------------------ Andres Corrada-Emmanuel Email: andres@corrada.com Owner http://www.corrada.com/mamey Mamey Phone: (413) 587-9595 ------------------------------------------------------