In order to upload a file with the Drupal upload.module, you need the "upload files" and "view uploaded files" permissions. My module, OG User Roles (http://www.drupal.org/project/og_user_roles) assigns roles to users based upon the group(s) they are in. So, if a user has the "upload files" permission for Group A, he should be able to upload a file in Group A. What is now happening is that: 1. Group A user with the "upload files" permission in Group A is attempting to upload a file in Group A. In node "create" or "edit" screen, he goes to "File attachments" section. 2. User clicks on "Browse" button. He locates and selects file. 3. User clicks on "Attach" button to upload file. File appears to upload, then this error message pops up in a separate window: http://drupal.org/files/issues/og_user_role_errmsg_0.gif 4. User clicks on "OK" button to clear error message. Attached file doesn't appear in "File Atachments" section. "Attach" button also disappears. 5. User clicks on "Preview" button. Node previews, WITH the attached file. 6. User clicks on "Submit" button. Node is saved with the attached file. So, the problem isn't that the file isn't uploaded or attached, the problem is the Access denied pop-up window. From the error log I see that the url in question is: upload/js. Can someone help me out with where exactly in the upload process this error message is coming from, and suggestions on how to get around it? I've documented this process, step by step, with images here: http://www.scbbs.com/node/204 Thanks for any assistance. -ron -- Ron Parker Software Creations http://www.scbbs.com Self-Administration Web Site http://saw.scbbs.com SDSS Subscription Mgmt Service http://sdss.scbbs.com Central Ave Dance Ensemble http://www.centralavedance.com R & B Salsa http://www.randbsalsa.com