Scott I had a similar problem but I wasn't creating groups at runtime so a restart fixed it... But, from the API docs:
> Constructor Detail > AccessControlList > public AccessControlList(java.util.Map roleSets, > java.util.Map permissionSets) > Constructs a new AccessControlList. > > This class follows 'immutable' pattern - it's objects can't be modified > once they are created. This means that the permissions the users have are > in effect form the moment they log in to the moment they log out, and > changes made to the security settings in that time are not reflected > in the state of this object. If you need to reset an user's permissions > you need to invalidate his session. > The objects that constructs an AccessControlList must supply hashtables > of role/permission sets keyed with group objects. Did you try logging out and back in? colm -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
