Jay,
Try <!--#if "AUTHENTICATED_USER.has_role('foo')"-->. There was an
excellent posting in the archives about all the possibilities with the
user object. Also read the files in the AccessControl folder inside
Zope/lib/python.
--
Jason Spisak
webmaster@mtear.com