>>>>> "SA" == Steve Alexander <steve@cat-box.net> writes: SA> <security:require permission_id="Zope.View" names="foo bar" SA> /> SA> require permission Zope.View to access foo and bar SA> The latter reads much better to me. Me too, but if those are the semantics, why not go one little step further: <security:requires permission="Zope.View" to_access="foo bar" /> ? -Barry