Forum OpenACS Development: Re: issue with security context inheritance in the news package design

Oops!  Forgot to ask.  Should I patch the code directly or create an upgrade script?  And, if the latter, where can I learn more about creating upgrade scripts?