[Zope] newbie questions about security

[Chris McDonough]

danny shevitz wrote:
> 
> I'm trying to understand various aspects of permissions. I wanted to
> encapsulate my whole web site, so beneath / (root) I put a /Home
> folder.
> I would like only the contents of /Home to be viewable. I first set the
> protection of / to be not viewable by anonymous but then any time I try
> to do anything I have to enter a password. I worked around this by
> making the /index_html not viewable by anonymous, but leaving /Home
> viewable. Is this the way I am supposed to do it, at the document level
> as opposed to the folder level?

Probably what's happening here is that:

a)  You don't have an index_html in  Home, in which case it's acquired
from /
or
b)  You are using standard_html_header and standard_html_footer in /Home
which are acquired from /.

"b" probably explains the behavior you suggested in your following
paragraphs (which I snipped).
-- 
Chris McDonough
Digital Creations, Inc.
Zope - http://www.zope.org