The RolePermissions UI is broken. I'm looking into it. So far, I've found out that Zope/App/Security/AttributeRolePermissionManager.py is returning a two-tuple from getRolesForPermission, where according to the interface IRolePermissionMap, it should be returning a simple sequence of roles. -- Steve Alexander