Lance wrote: > I think you have to not only > inherit RoleManager, but OFS.SimpleItem.Item as well. At least, that's what > the Security HOWTO seems to imply. No, it shouldn't :( SimpleItem.Item has __allow_access_to_unprotected_subobjects__=1 in it, so it just masks the problem rather than solving it properly... cheers, Chris