Jürgen Herrmann wrote: > hi: > > AUTHENTICATED_USER is in REQUEST: > > hence you could write > ... self.REQUEST.AUTHENTICATED_USER.has_role(self, ["Manager"]) ... Yes, but this is deprecated. Do what Andreas said :-) cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk