> user = self.REQUEST['AUTHENTICATED_USER'] > for p in ['Foo',]: > print user.has_permission(p, parent) SecurityGetUser is the blessed way to get a user object. > I get 1 for everything. Is has_permission the correct call? That I'm not sure of.