On Tue, Nov 23, 2004 at 09:11:20PM +0300, Oleg Broytmann wrote: > That is, you test auth on every request "manually" in the every > published method? And if you forget - the method is public? _q_access gets called for every request as well so no difference there. We also check in some Directory.__init__ or _q_traverse methods. Neil