Jay, Try <!--#if "AUTHENTICATED_USER.has_role('foo')"-->. There was an excellent posting in the archives about all the possibilities with the user object. Also read the files in the AccessControl folder inside Zope/lib/python. -- Jason Spisak webmaster@mtear.com