Shane : hi i'm howard.I was confused by newest PTK security mechanism. I think the princeples look like this: 1. People shouldn't see private content even they know the url (except Manager or Owner). 2. security and catalog was changed after portalcontent state changed . and It all done by system automatically. 3. it's base on Zope security mechanism any suggestion will appreciate Bye howard