> The last and least desireable option would be to simply ignore the zope sec > mechanisms and roll our own sec management. I cant comment on the others, but please dont roll your own unless you have to, we have so many already and no definitive one. You might find improving one of the existing ones even more... Cheers. -- Andy McKay.