What is REQUEST ['PARENTS'] [0] inside acl_users.validate () method during Zope authentication/authorization process ? Help says it is ancestor of the called object, but it seems that in Zope 2.2.4 it is the actual called object. Is it going to stay like this in future versions ? What is the proper way to find accessed object inside validate () method of a user folder ? Vladimir