On Tue, Nov 23, 2004 at 08:45:47PM +0300, Oleg Broytmann wrote: > > The _q_access hook is gone. > > How does one supposed to test authentication/authorization? Any way you want to, including using _q_access(). ;-) I thought I had deleted it but the 2.0a2 release still includes a mix-in class called AccessControlled. E.g. class MyDirectory(AccessControlled, Directory): def _q_access(self): ... If you like to have the request object as an argument, you can write your own mixin. We have decided to use utility functions for access control. E.g. class MyDirectory(Directory): def _q_index(self): check_access() ... Cheers, Neil