--- exUserFolder.py.orig	Wed Dec 12 00:32:26 2001
+++ exUserFolder.py	Wed Dec 12 00:32:53 2001
@@ -229,8 +229,9 @@
 			action ='%s/manage_main' % REQUEST['URL1'])
 	ob=exUserFolder(authId, propId, memberId, cookie_mode, session_length,
 					sessionTracking, idleTimeout, cookie_secret)
+	self = self.this()
 	self._setObject('acl_users', ob, None, None, 0)
-	self.__allow_groups__=self.acl_users
+	self.__allow_groups__=ob
 	ob=getattr(self, 'acl_users')
 	ob.postInitialisation(REQUEST)
 	if REQUEST: