> Hmm... this is a CMF 1.4 addition, right? Is there any way to do this or > something similar in 1.3.1? Well, .metadata files replace the deprecated .security files, which 1.4 also reads. I can't remember offhand if .security also allows for proxy roles .. check the source to make sure .. j