I wish I could do: from ZPublisher import Client return Client.call(url,username,password)[1] ...in a python script. Why would that be insecure? cheers, Chris