Hi, I've just been bitten by _.SecurityGetUser.hasRole('Manager') It has been mentioned in August 2001 by Brian as deprecated. Brian also suggested to use "has_role" and he also mentioned "has_permission". Could Zope Book be updated to describe these new methods? -- Milos Prudek