seb bacon writes: > It seems it may be something to so with virtual hosting. I'm using a > VirtualHostMonster to manage things. If I don't use it, and I use > this() to refer to the root of the site, things are fine. If I do, > this() throws an Unauthorized. You could try to install ZDebug. It often gives very good diagnostics for Unauthorized Exceptions (in DTML objects). Dieter