Are you allowed to have an various acl_users folder in different portal folders besides the portal root, with the standard CMF like the Zope book recommends for managing users/roles/permissions for a non cmf zope site? I just gave it a try and get a login failure. Or do all roles/users have to be defined in the portal root's acl_users (or higher) ? Thanks Lynn