Oliver Frommel writes: > .... > Isn't authentication supposed to acquire from > the parent then?? It is: After ZPublisher located the object to be published and therefore knows the required roles, it goes back on its tracks to find a user folder that can authenticate a user with one of the required roles. Superuser is handled specially. Dieter