I running into a strange and bad behavior with ZMS 2.11.0:
When I try to enable the left navigation tree frame in the ZMS management interface ('Sitemap' button at the right top), I'm kicked out of the Zope/ZMS session!
I.e. the browser requests a username and password for the realm 'Zope', invalidating my existing session.
To reproduce, create a new ZMS instance. In the ZMS instance, create a user "autor" with (only!) the "Autor" role in the ZMS Home. Log out of ZMS. (Perhaps you should close all browser windows and empty your browsers cache for cookies etc., if you can't reproduce the following.) Open the public homepage of the ZMS instance and log into ZMS as "autor". Click on the "Sitemap" icon at the right top. Ooops: The browser asks for username and password for 'Zope', and the ZMS session is invalidated.
This happens e.g. with ZMS 2.11.0-09_3 (running on Zope 2.10.5 on Debian 4.0). I haven't seen this problem with ZMS 2.10.x.
The behavior seems to vary on different browser systems, but I was able to reproduce the problem with Safari and Firefox on OSX and Firefox on Linux. It also affects MSIE and Firefox on Windows.