Hmmm again an access rule might be better (since it would fire during traversal.. ). The *convention* is that management functions start with 'manage' so you could check PATH for 'manage', but what if someone makes a document called 'management_style.html' ? I'm not sure there's a good way for that. Maybe you could hack manage_tabs ;-)

Untested: <dtml-if expr="not AUTHENTICATED_USER.has_permission('View','PARENTS[0]')"> .... Maybe something else for PARENTS[0]... Would this work? cheers, oliver