[Zope-CMF] Re: CMFPhoto Permissions

[Tres Seaver]

BOB.BARTER at sbcglobal.net wrote:
> I have a site with:
> CMF-1.4.2
> Plone 2.0-RC3
> CMFPhotoAlbum 0.4final
> CMFPhoto 0.4rc1
> 
> All is well except:
> I am having difficulty controlling visibility of the photo albums
> and the photos.  Photos and photo albums that are set to private
> are visible only to the owner as expected.  As soon as a photo's
> workflow state is set to visible, then everyone (including
> anonymous users) can see the photo.
> 
> How do I change the (configuration/permissions/???) so that
> anonymous users can only see those photo albums and photos that
> have a workflow state of published?

DCWorkflow "stamps" the role-permissions for the workflow state onto the 
content object as it enters that state;  so, you need to edit the 
"visible" state's security tab, and remove the View permission for 
anonymous.  The workflow tool has a knob for updating content to match 
such changes.

Tres.
-- 
===============================================================
Tres Seaver                                tseaver at zope.com
Zope Corporation      "Zope Dealers"       http://www.zope.com