The problem with the code below is that you must be logged in as the person you want to get the roles of. If for example an administrator needed to get the roles of a specific user or group of users the the code below would not work. <dtml-var "AUTHENTICATED_USER.getRoles()"> Dan