> Your file is uploaded completely (to a temporary file) > before the Zope request begins in real (and before Zope > detects that a mandatory field is missing). Does this mean that the upload completes before the security check? Regards, Sandor