I asked this awhile back ... but didn't get any takers ... I created two additional roles in my CMFSite (portal). I find that when using CMF's DefaultWorkflow (not DCWorkflow) those new roles are the right to view private stuff ... the same way owner, member and manager are but I don't want this. Can someone point me to where the code is that makes this happen? Lynn