I'm using the the instance based ACL security of Acegi (0.7 snapshot from cvs). This is truly impressive piece of work (easily beats every home grown equivalents we've done :). Ben, would it be...