Hi, In CMFCorePermissions.py there's a function called setDefaultRoles, and in it there's a comment: # XXX This ought to be in AccessControl.SecurityInfo. ...well, it is! security = ClassSecurityInfo() security.setPermissionDefault(permissionName,rolesList) Am I missing something? cheers, Chris