When I create a user in a subfolder, he can view the files in the parent folders: /www/folder1 /www/folder2 The manager of folder1 can not only view the content of /www but the content and the files of /www/folder2 too. This is BAD security IMHO. I don't want the user of folder1 let to know, that there exists a folder2! _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. _______________________________________________ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )