Hey, With your acl's you need to specify the most specific first, and go to the most general. In other words, here's the fix for this: > access to * by self write by users read by anonymous search Hope that helps, Andy