> I have stepped through the code but I can't
see what is responsible
> for
> preventing the permissions being added from the root role when the
> role is
> specified on the child with an empty set of permissions. I can see
> the
> barrier logic, but this isn't a barrier role, and all the rest of the
> behaviour seems to add the permissions from the root back. Hence I
> can see
> the page as the anonymous user?
Can you tell us which version of SmallWiki and package you use since
some security
models are not maintained anymore (such as the one described in the
master of David Vogel)?
Stef