Hi, Only groups are cached and there is an issue with the group cache not being updated properly when groups are changed. This is a known issue which is on the list of things to fix.. There is a API to call to flush the cache.. You can create a page with in it: $xwiki.flushCache() Then just load the page and the cache will be flushed. Concerning how rights work: - deny rights additive: any deny right will throw you out - allow rights are cascaded: a page right replaces a space right which replaces the global xwiki right The default right is "allow" unless the right has been assigned to somebody. In this case you need to explicitely have the right to access the document. This means that to protect a document or space or wiki you just need to state who is allowed. All other users will be denied access. Ludovic Paul Dlug a écrit : -- Ludovic Dubost XPertNet: http://www.xpertnet.fr/ Blog: http://www.ludovic.org/blog/ XWiki: http://www.xwiki.com Skype: ldubost AIM: nvludo Yahoo: ludovic