> > Do client applications have to support "dynamic groups" by using the > > "memberurl" attribute to issue a search by their own ? > > > Yes. Ok, that burries the "dynamic group" option for my setup. Indeed, Plone is looking for the attribute 'member' or 'uniquemember' in the group objects. > > If that's the case, has the possibility to emulate a static group from > > an external point of view (with a cache being refreshed after updates > > on the directory) been envisaged ? > It depends. What are you trying to do? Populate the members of a > static group entry dynamically depending on some property of the entry > of each member? Exactly. But with a filtered Role, won't I have the same behaviour as in dynamic groups in the sense that the role only has a 'nsrolefilter' attribute similar to 'memberurl' and not a true list of the members ? Best Regards, -- Mikael Kermorgant