This collector issue explains a medium-strength security hole in the tree= tag http://collector.zope.org/Zope/604 I have a patch for the obvious holes, which looks like a borderline candi= date=20 for 2.6.1. Could anyone who uses the Tree tag extensively please give it = a=20 spin. --=20 Toby Dickenson http://www.geminidataloggers.com/people/tdickenson