[Zope] Zope and security.

Otto Hammersmith otto@ipass.net
Wed, 10 Nov 1999 17:56:52 -0500


While I'm on the topic...

It seems to me you cannot securely allow users access to the "Security"
tab in the management interface.  It's easy enough to shut this off, but
that does take away an awful lot of functionality.  Is this an intended
design, or is it a flaw in the Zope security model?

Perhaps the best way to setup something like Zope.org (multiple
contributors) in a secure maner is to roll your own Folder object with a
specified set of sub-objects.  Tedious, but secure. :-S

				-Otto.