Hello Developers i am working on a REST remote control for xwiki, based on an idea from Sergiu Dumitriu. The idea is to leave xwiki authorisation where it is (it works fine, as far as i can see), and have synchronized user and group data, as well as space acces rights. The drawbacks of this approach have been pointed out by Sergiu: updates and deletions (group membership, group right per space etc.) everything but easy to maintain. Nevertheless, it appears to be doable, and until the decision is made, which SSO xwiki will use in 1.1 / 2.0, i will continue this way. Two questions regarding acces rights: 1: When i have 2 groups aTeam and bTeam, and two spaces aSpace and bSapce, and each space has access rights entry that disallow viewing aSpace for everyone but admins and aTeam members (same for bTeam/bSpace): Why do bTeam members still see the aSpace in the right hand panel? bTeam members do *not* have access to the aSpace base page, created when creating aSpace, but an unresolved velocity fragment appears after trying to acces bSpace pages as aTeam member, vice versa. Is it correct, that it says "Web Home" in the panel instead of the title the spaces' default pages? 2: When adding new members to a group there is a strange beahviour, sometimes: instead of group member names after adding a user to the group, there is "Web Home". Why this? And is this fixed in RC1: http://mail-archive.objectweb.org/xwiki-users/2006-02/msg00103.html or do i have to add a $xwiki.flushCache() in a page, that is called each time groups are updated? I hope you can help wiht that topic, as a proper space access depending on group membership is a crucial function if you intend to use a wiki with a high number of users. Yours Thomas Krämer