i'm sorry but all i can do is repeat what i said, this is behaviour by design, not an error. If a request to a .net mapped page does not have a portalid (or a tabid from which a portalid can be derived), then it is impossible to tell which portal the user is in and therefore if they have permissions i.e. if i have a portal with a user called "test", a second portal using the same database may have a different user also called "test" (users are not syncronised across multiple portals), we require portalid/tabid to determine which portal the request is for to determine the portal permissions for the correct "test" user.

Typically I avoid criticising any module makers, but this is a long established behaviour since the 1.0 release of dotnetnuke and I'm surprised that any module maker does not know this.

Cathal