I need to restrict the execution of a new mailing script that sends mail to all members. The script is in the Portal_skins/custom folder. I tried changing the View permissions to 'Manager' and 'Owner' only, but it still allowed me to log in as a basicamember and fire off the script via a get request ( http://myhost/mailingScript?subject=foo&message=bar ). Thanks