When I change the state of a document in a CMF/Plone its security settings gets changed. Where does that happen. The workflow as installed by Plone does not use any scripts. So who says what the security settings of a state must be?? thanks for your insights Robert