[Zope] Wrong roles returned?

[Christoph Landwehr]

Hi,
> If a login form appears within the HTML page you're viewing, then you're 
> using cookie authentication.

Sorry, if I didn't put my question right. I did not meant to ask the difference 
between basic and cookie authentication.

What I fond out:

If I log in in the (let's say) root-folder, an the view a document below root, I 
am authenticated, no matter if the object needs authentication or not. I 
understand that the autentication is being aquired.

If I log in at object B (authentication required) and than view document A (no 
authentication) an the same level, I am NOT authenticated (not on aquisition 
path). But I can view  third document (authentication required) on the same 
level without being asked for an authentication again, although it is not in the 
aquisition path of the first object.

That's a bit confusing (for me)

Regards
Christoph