The machinery won't be invoked for requests which don't need to validate (e.g., for resources viewable by Anonymous). Could that be the case for you?
No. Closer inspection seems to show that I actually don't get PAS to do anything at all. It is simply ignored, unless I put it into the root, in which case I can't do anything, since it doesn't care of emergency_user.
So I'm completely stumped.
Zope-Dev maillist - [EMAIL PROTECTED]
** No cross posts or HTML encoding! **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce