By default, Zope 2 grants view access to the anonymous role. Should Zope 3 do the equivalent? Ot should sites be private unless they are explicitly made public? Thoughts? Jim -- Jim Fulton mailto:jim at zope.com Python Powered! CTO (540) 361-1714 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org