Of course I did. Why on earth would you be able to view a front page of a site when it is labelled as 'authenticated' and also as 'manager' ? just by pressing cancel or return a few times. Big security flaw I'm sorry. Also superuser passwords don't work when security is set up and I've tried this on a couple of set-ups. And this is apart from the usability.
<br><br><div><span class="gmail_quote">On 2/8/06, <b class="gmail_sendername">Tino Wildenhain</b> <<a href="mailto:tino@wildenhain.de">tino@wildenhain.de</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
michael nt milne schrieb:<br>> Thanks for the advice. I'll have another look at the security settings<br>> but this is undoubtedly an issue. The superuser password not working is<br>> the main one etc. But ultimately my comments on usabiltity should be
<br>> taken on board because Zope security is overly complex.<br><br>Actually its not that hard - and its just fine grained - a very strength<br>of zope. You can use VerboseSecurity to debug your security issues.<br><br>
Did you read the chapter about users and security in the zope book?<br><br>Regards<br>Tino<br></blockquote></div><br><br clear="all"><br>-- <br>Michael