CurrentPage.ACL.QueryDistinctAccess(AccessLevel.Read); /Håkan

Tack, men tyvärr är det inte riktigt det jag vill, utan: I Metoden: protected string IsItemVisible(EPiServer.Core.PageData pdPage) { // med hjälp av pdData, kolla vilka grupper denna är satt till, om det visar sig att den är satt till gruppen "X", returnera true, annars false. } /richard

See the AccessControlList class, and the ToRawACEArray method. You can also use the ACL.QueryDistinctAccess with EPiServer.Security.AccessLevel.Read and the CurrentUser.SidList. /Steve

Ok, but how do I do this, more exactly ? And why do I need to use the CurrentUser ? I have suspected it must be something in the EPiServer.Security, but I cant figure out what I need to do to accomplish that thing I want to do. I have been looking for something like MyPageInstance.GroupList() or simular, there must be a pretty simple way to do this, it cant be that hard, or is it ? loop through the objects assigned groups, and check each one, or the other way, something like TheNameSpace.TheClass.StaticHasGroup(MyPageInstance, "TheGroupImLookingFor") Or is the right place to look, is it in the DataFactory, or what ?? /Richard

Security has three dimensions when we're talking about EPiServer pages: 1. The actual page 2. A user, group og built-in security object 3. The access level (read, edit etc.) So, the following example, taken from the AccessControlList class description, will tell you if the currently logged on user is allowed to create new pages below the current page: if (CurrentPage.ACL.QueryDistinctAccess( AccessLevel.Create, CurrentUser.Sid )) { // CurrentUser has Create permission. } So, a SID can be a user or a group, and if you want to check if a given group has access to read a given page, you can do it in two ways. 1. Check if the group is a member of the ACL by using CurrentPage.ACL.Exists(groupSidId), and then get the AccessLevel by casting the return value of the AccessControlList indexer (the Item property) like this: AccessLevel lvl = (AccessLevel)CurrentPage.ACL[myGroupId]; 2. Loop through the RawACE array you can get from CurrentPage.ACL.ToRawACEArray(), and check if the group is part of that array, and then check the AccessLevel of the RawACE item. In both instances, you might have to convert a group name to it's ID (the sid), if you do not have it readily available. You can do that by using the GroupSid.LoadGroup(name) static method and check the ID property of the returned object. /Steve