Christopher N. Deckard writes: > ... "manage_pasteObjects" and proxy roles ... A bug: "mange_pasteObjects" does not look for proxy roles. It is completely uninterested in "execution security" aspects. To find out more, you can search the Zope mailing list archives (zope, zope-dev, zope-cmf). There may already be a Collector entry. If not, file one... Dieter