Chris Withers writes: > .... > Anyway, it appears that proxy roles are [not] 'carried on'.... > > What gives? Is this how its intended? It is intended. Was changed with the big Zope 2.2 security policy shakeup. You may find some explanation for the change on zope.org. Dieter