J Cameron Cooper wrote: > Yes. Traversal happens anytime an object is published, even if it's not > through HTTP. You could try a Site Access Rule in the root folder... cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk