I updated my CVS installation to 12.6 and I found two problems with DataThree. 1. I have a permission A with the subpermission B. (A:B). If I wont to add a subpermission for B (using portal UI), it generates two top level permissions: A:B B:C instead of A:B:C 2. However I call DataThree->get(...) it always returns only the passed top level category, without any subcategory. Duck