We've just noticed that in zope 2.3.3, using declarePublic has the side-effect of making a request anonymous. That is, a logged-in manager, viewing a declarePublic()'ed page will appear to be anonymous. This isn't mentioned in the manual, and probably should be, assuming it's the desired behaviour. Richard